last executing test programs: 1m49.324568113s ago: executing program 0 (id=635): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m29.660236503s ago: executing program 0 (id=635): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 58.30590409s ago: executing program 0 (id=635): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 38.138655258s ago: executing program 0 (id=635): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14.713415354s ago: executing program 0 (id=635): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 12.719808698s ago: executing program 1 (id=1103): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21088e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000014c0)='./file0\x00', r0, 0x0) 12.009488403s ago: executing program 1 (id=1108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, 0x0) 11.625788398s ago: executing program 4 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pivot_root(&(0x7f0000000900)='./file0\x00', &(0x7f0000000480)='./file1\x00') 11.509237789s ago: executing program 1 (id=1112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xbb8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.136687334s ago: executing program 4 (id=1114): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) 10.903936795s ago: executing program 4 (id=1115): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x3}) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x2}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 10.481413944s ago: executing program 1 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0xfffffffffffffffd, 0x0) 10.255804875s ago: executing program 1 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x900, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 9.624637903s ago: executing program 3 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) 9.427942021s ago: executing program 3 (id=1126): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x29}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_io_uring_setup(0xd5, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.140450038s ago: executing program 3 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000580)={0x1c, 0x13, 0x101, 0x0, 0x0, "", [@typed={0x9, 0x0, 0x0, 0x0, @str=',/&7\x00'}]}, 0x1c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 8.626028585s ago: executing program 2 (id=1128): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = getpid() sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)={0x10}, 0x10}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) 8.518801565s ago: executing program 4 (id=1129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 7.000436124s ago: executing program 2 (id=1130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000083000040"]) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) 6.83416416s ago: executing program 4 (id=1131): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) 6.83330415s ago: executing program 3 (id=1141): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xbb8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.775715675s ago: executing program 2 (id=1132): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000240)={0x0}) 6.628389789s ago: executing program 2 (id=1133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x20) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="4174cb2a073fb8bc8391ea18f58cfade0015a52ba4998066ea47d88658369b03", 0x20}], 0x1}, 0x0) 6.379999512s ago: executing program 1 (id=1134): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x80000, 0x0, 0x0, 0xfffffffffffffffe}) 6.351824654s ago: executing program 4 (id=1135): mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.340409035s ago: executing program 2 (id=1136): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@local}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={&(0x7f0000001100), 0x6, 0x400}) 6.229788045s ago: executing program 3 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 6.105598917s ago: executing program 2 (id=1138): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000240), 0x3, 0x55a3, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 6.104844787s ago: executing program 3 (id=1139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb00}], 0x2}, 0x0) 0s ago: executing program 0 (id=635): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): phys_seg 1 prio class 2 [ 227.455195][ T6454] loop2: detected capacity change from 0 to 40427 [ 227.559968][ T6454] F2FS-fs (loop2): invalid crc value [ 227.577759][ T6454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 227.722061][ T6454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.818422][ T6454] syz.2.680: attempt to access beyond end of device [ 227.818422][ T6454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 227.955640][ T6000] syz-executor: attempt to access beyond end of device [ 227.955640][ T6000] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 227.996238][ T6468] loop1: detected capacity change from 0 to 1024 [ 228.022300][ T6468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.276091][ T3655] Bluetooth: hci1: command tx timeout [ 228.492836][ T5194] team0 (unregistering): Port device team_slave_1 removed [ 228.693830][ T5194] team0 (unregistering): Port device team_slave_0 removed [ 228.887743][ T5194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.014025][ T5194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.703781][ T6481] loop1: detected capacity change from 0 to 40427 [ 229.726229][ T6481] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 229.734282][ T6481] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 229.757519][ T6481] F2FS-fs (loop1): invalid crc value [ 229.798747][ T6481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 229.871950][ T6481] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 229.879046][ T6481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 229.979043][ T6481] syz.1.690: attempt to access beyond end of device [ 229.979043][ T6481] loop1: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 230.005269][ T33] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 230.061471][ T6481] syz.1.690: attempt to access beyond end of device [ 230.061471][ T6481] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 230.088249][ T33] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 230.335678][ T5194] bond0 (unregistering): Released all slaves [ 230.342804][ T3655] Bluetooth: hci1: command tx timeout [ 230.452997][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.460314][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.477124][ T6326] device bridge_slave_1 entered promiscuous mode [ 230.508554][ T6474] device team0 entered promiscuous mode [ 230.528266][ T6474] device team_slave_0 entered promiscuous mode [ 230.549634][ T6474] device team_slave_1 entered promiscuous mode [ 230.632393][ T6475] device syz_tun entered promiscuous mode [ 230.663342][ T6475] team0: Port device syz_tun added [ 230.872406][ T6474] device team0 left promiscuous mode [ 230.878232][ T6474] device team_slave_0 left promiscuous mode [ 230.893808][ T6474] device team_slave_1 left promiscuous mode [ 230.900101][ T6474] device syz_tun left promiscuous mode [ 230.918551][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.946555][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.128854][ T6326] team0: Port device team_slave_0 added [ 231.159699][ T6326] team0: Port device team_slave_1 added [ 231.347173][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.373061][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.442793][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.513183][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.536013][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.601262][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.766728][ T22] kernel write not supported for file /input/mice (pid: 22 comm: kworker/1:0) [ 231.766769][ T6326] device hsr_slave_0 entered promiscuous mode [ 231.821548][ T6326] device hsr_slave_1 entered promiscuous mode [ 232.111054][ T6542] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 232.287770][ T6542] siw: device registration error -19 [ 233.017008][ T6574] delete_channel: no stack [ 233.404240][ T6326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.446832][ T6326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.465879][ T6326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.485046][ T6326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.839846][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.921370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.934309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.938179][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.003443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.032643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.084727][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.091924][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.156659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.192662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.244098][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.251295][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.287382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.348620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.388765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.442103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.493911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.519728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.539500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.573472][ T6625] block nbd4: shutting down sockets [ 235.630210][ T6326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.669128][ T6326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.705595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.714317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.736822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.753418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.780885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.797005][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.734'. [ 235.817657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.565204][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.606094][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.687207][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.823374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.852970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.946585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.962558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.978060][ T6326] device veth0_vlan entered promiscuous mode [ 237.005208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.020301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.080542][ T6326] device veth1_vlan entered promiscuous mode [ 237.202518][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.210898][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.246350][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.265343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.294044][ T6326] device veth0_macvtap entered promiscuous mode [ 237.347486][ T6326] device veth1_macvtap entered promiscuous mode [ 237.401681][ T3983] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.479270][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.500210][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.511017][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.531430][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.542344][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.563142][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.580923][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.603265][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.613971][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.625573][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.636495][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.647957][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.660779][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.678404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.693361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.715349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.726810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.738988][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.751635][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.764407][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.777685][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.789963][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.804317][ T3983] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.826077][ T3983] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.836252][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.875139][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.896748][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.919661][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.941487][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.942300][ T3983] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.961616][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.972941][ T3983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.982615][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.993284][ T3983] usb 3-1: SerialNumber: syz [ 238.026368][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.047137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.065522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.096911][ T6326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.116474][ T6326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.136207][ T6326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.155196][ T6326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.221100][ T6686] loop1: detected capacity change from 0 to 8192 [ 238.306104][ T3983] usb 3-1: 0:2 : does not exist [ 238.334694][ T3983] usb 3-1: unit 32 not found! [ 238.334755][ T6686] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.357019][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.368356][ T6686] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 238.381780][ T6686] REISERFS (device loop1): using ordered data mode [ 238.388337][ T6686] reiserfs: using flush barriers [ 238.404944][ T6686] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.417125][ T3983] usb 3-1: USB disconnect, device number 4 [ 238.430636][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.457598][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.469918][ T6686] REISERFS (device loop1): checking transaction log (loop1) [ 238.530932][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.545135][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.581142][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.757265][ T6686] REISERFS (device loop1): Using tea hash to sort names [ 238.788969][ T6686] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 239.333634][ T6707] tipc: Started in network mode [ 239.371854][ T6707] tipc: Node identity ac1414aa, cluster identity 4711 [ 239.380563][ T6707] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.443435][ T6707] tipc: Enabled bearer , priority 10 [ 239.514065][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.651706][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.679057][ T3699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.791694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.931842][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.952676][ T3699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.081641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.137069][ T3699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.221668][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.318991][ T3699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.361698][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.505152][ T3981] tipc: Node number set to 2886997162 [ 240.641687][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.920610][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.909535][ T6728] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 242.995869][ T6728] team0: Port device netdevsim0 added [ 243.136471][ T6733] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 243.162025][ T3688] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 243.233736][ T6733] team0: Port device netdevsim0 removed [ 243.274261][ T6733] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 243.403303][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 243.513802][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.526339][ T3688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 243.527303][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.547394][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.550713][ T3688] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 243.568134][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.578603][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 243.588068][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.625943][ T3688] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 243.661389][ T3688] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 243.697798][ T3688] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 243.717734][ T3688] usb 3-1: config 1 interface 0 has no altsetting 0 [ 243.732872][ T3688] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 243.758202][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.852814][ T3688] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 244.075316][ T3688] scsi host1: usb-storage 3-1:1.0 [ 244.276747][ T4456] usb 3-1: USB disconnect, device number 5 [ 244.557949][ T6770] Invalid ELF header len 5 [ 244.591673][ C1] net_ratelimit: 3 callbacks suppressed [ 244.591694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.287202][ T6796] tipc: Started in network mode [ 245.293233][ T6796] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 245.326138][ T6796] tipc: Enabled bearer , priority 10 [ 245.407287][ T6745] chnl_net:caif_netlink_parms(): no params data found [ 245.460168][ T3699] device hsr_slave_0 left promiscuous mode [ 245.562103][ T3699] device hsr_slave_1 left promiscuous mode [ 245.596580][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.611181][ T6811] loop4: detected capacity change from 0 to 2048 [ 245.620570][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.621946][ T3654] Bluetooth: hci1: command tx timeout [ 245.627871][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.687387][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.712561][ T6811] EXT4-fs: Ignoring removed orlov option [ 245.723915][ T6817] Process accounting resumed [ 245.753836][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.782843][ T3699] device bridge_slave_1 left promiscuous mode [ 245.814181][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.833706][ T6811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.849698][ T3699] device bridge_slave_0 left promiscuous mode [ 245.849770][ T6817] Process accounting resumed [ 245.868915][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.020258][ T6825] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.069679][ T3699] device veth1_macvtap left promiscuous mode [ 246.096256][ T3699] device veth0_macvtap left promiscuous mode [ 246.116608][ T3699] device veth1_vlan left promiscuous mode [ 246.156913][ T3699] device veth0_vlan left promiscuous mode [ 246.179751][ T6825] EXT4-fs (loop4): Remounting filesystem read-only [ 246.233070][ T6800] loop1: detected capacity change from 0 to 32768 [ 246.278702][ T6800] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.787 (6800) [ 246.310370][ T5942] EXT4-fs (loop4): unmounting filesystem. [ 246.332334][ T6800] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 246.344801][ T3982] tipc: Node number set to 15444650 [ 246.378100][ T6800] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 246.407429][ T6800] BTRFS info (device loop1): force clearing of disk cache [ 246.422531][ T6800] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 246.472084][ T6800] BTRFS info (device loop1): use zstd compression, level 3 [ 246.479425][ T6800] BTRFS info (device loop1): using free space tree [ 246.662587][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.680190][ T6800] BTRFS info (device loop1): enabling ssd optimizations [ 246.715916][ T6800] BTRFS info (device loop1): rebuilding free space tree [ 246.970437][ T5782] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 246.981458][ T6857] loop0: detected capacity change from 0 to 7 [ 246.999062][ T6857] Dev loop0: unable to read RDB block 7 [ 247.007527][ T6857] loop0: unable to read partition table [ 247.033682][ T6857] loop0: partition table beyond EOD, truncated [ 247.043316][ T6857] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 247.043316][ T6857] ) failed (rc=-5) [ 247.703593][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.711407][ T3655] Bluetooth: hci1: command tx timeout [ 248.322238][ T3699] team0 (unregistering): Port device team_slave_1 removed [ 248.410246][ T3699] team0 (unregistering): Port device team_slave_0 removed [ 248.475692][ T3699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.593737][ T3699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.741676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.781649][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.788777][ T3654] Bluetooth: hci1: command tx timeout [ 250.831664][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.795833][ T3699] bond0 (unregistering): Released all slaves [ 251.861641][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.861740][ T3654] Bluetooth: hci1: command tx timeout [ 252.237125][ T6814] device syzkaller1 entered promiscuous mode [ 252.901654][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.991642][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 253.084643][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.099745][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.110282][ T6891] loop1: detected capacity change from 0 to 1024 [ 253.126024][ T6745] device bridge_slave_0 entered promiscuous mode [ 253.138828][ T6891] EXT4-fs: Ignoring removed oldalloc option [ 253.162245][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.191063][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.199855][ T6745] device bridge_slave_1 entered promiscuous mode [ 253.271906][ T6891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 253.389770][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.391978][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.431959][ T6899] syz.4.810 (6899) used greatest stack depth: 19128 bytes left [ 253.439655][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 26 [ 253.466642][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.529485][ T6903] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 253.539814][ T6905] loop2: detected capacity change from 0 to 1024 [ 253.590210][ T5782] EXT4-fs (loop1): unmounting filesystem. [ 253.595911][ T6745] team0: Port device team_slave_0 added [ 253.598345][ T6745] team0: Port device team_slave_1 added [ 253.608721][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.637890][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.679319][ T6905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.692030][ T22] usb 4-1: SerialNumber: syz [ 253.763733][ T22] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 253.845599][ T6913] loop1: detected capacity change from 0 to 512 [ 253.858538][ T6915] loop4: detected capacity change from 0 to 512 [ 253.890201][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.896810][ T6915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.901961][ T6000] EXT4-fs (loop2): unmounting filesystem. [ 253.938876][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.943312][ T6913] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.813: corrupted in-inode xattr [ 253.965084][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.017415][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.035447][ T6913] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.813: couldn't read orphan inode 15 (err -117) [ 254.050605][ T6915] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 254.053576][ T4456] usb 4-1: USB disconnect, device number 9 [ 254.105753][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.112990][ T6915] EXT4-fs (loop4): Remounting filesystem read-only [ 254.119724][ T6915] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.814: invalid indirect mapped block 1 (level 1) [ 254.122439][ T6913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 254.174474][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.192781][ T6915] EXT4-fs (loop4): 1 truncate cleaned up [ 254.255973][ T6915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.272815][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.314989][ T6913] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 254.446929][ T5782] EXT4-fs (loop1): unmounting filesystem. [ 254.459820][ T6745] device hsr_slave_0 entered promiscuous mode [ 254.462850][ T5942] EXT4-fs (loop4): unmounting filesystem. [ 254.502495][ T6745] device hsr_slave_1 entered promiscuous mode [ 254.611081][ T6930] loop1: detected capacity change from 0 to 128 [ 254.631259][ T6930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.657488][ T6930] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 254.814421][ T5782] EXT4-fs (loop1): unmounting filesystem. [ 254.981929][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.572285][ T6958] loop1: detected capacity change from 0 to 8 [ 255.599534][ T6958] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 255.624537][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630943][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.021719][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.150673][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 256.180904][ T6934] loop2: detected capacity change from 0 to 32768 [ 256.305564][ T6934] XFS (loop2): Mounting V5 Filesystem [ 256.383498][ T6745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.479233][ T6745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.493726][ T6934] XFS (loop2): Ending clean mount [ 256.551817][ T6934] XFS (loop2): Quotacheck needed: Please wait. [ 256.626029][ T6934] XFS (loop2): Quotacheck: Done. [ 256.700722][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.744164][ T6745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.797983][ T6000] XFS (loop2): Unmounting Filesystem [ 256.897950][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.952293][ T6745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.061885][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.064734][ T6976] loop4: detected capacity change from 0 to 32768 [ 257.117418][ T6976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.834 (6976) [ 257.136063][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.221646][ T6976] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.254799][ T6976] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 257.333960][ T6976] BTRFS info (device loop4): using free space tree [ 257.472208][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.560426][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 257.576986][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.582464][ T6976] BTRFS info (device loop4): enabling ssd optimizations [ 257.593068][ T3659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.608293][ T3659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.615864][ T7020] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 257.624428][ T3659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.635134][ T3659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 257.648507][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.656190][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.666577][ T3659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.733344][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.740565][ T7020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.748432][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.755666][ T7020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.779213][ T7020] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 257.991879][ T5942] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.113217][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.197783][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.346751][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.366994][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.381175][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.441063][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.450938][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.463583][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.470757][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.586780][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.612447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.622774][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.643029][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.650284][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.679045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.703225][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.882866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.901071][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.937292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.956496][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.990711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.011114][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.040226][ T6745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.132787][ T6745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.141657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.228957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.240852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.259800][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.424034][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 259.701918][ T3655] Bluetooth: hci0: command tx timeout [ 260.150476][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.169228][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.181787][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.207211][ T7012] device bridge_slave_0 entered promiscuous mode [ 260.299030][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.323605][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.344214][ T7012] device bridge_slave_1 entered promiscuous mode [ 260.388995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.399666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.492829][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.544175][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.629108][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.907172][ T26] audit: type=1326 audit(1727095241.681:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 260.939868][ T26] audit: type=1326 audit(1727095241.681:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 260.989011][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.009574][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.021477][ T26] audit: type=1326 audit(1727095241.681:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 261.068480][ T26] audit: type=1326 audit(1727095241.681:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 261.117519][ T7012] team0: Port device team_slave_0 added [ 261.160470][ T26] audit: type=1326 audit(1727095241.681:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 261.187438][ T7012] team0: Port device team_slave_1 added [ 261.221756][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.251622][ T26] audit: type=1326 audit(1727095241.821:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3ad7def9 code=0x7ffc0000 [ 261.318661][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.342627][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.351853][ T26] audit: type=1326 audit(1727095241.821:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3ad7def9 code=0x7ffc0000 [ 261.392832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.432732][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.689998][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.710720][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.771764][ T5584] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.781775][ T3655] Bluetooth: hci0: command tx timeout [ 261.824987][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.893954][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.925139][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.988588][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.013254][ T5584] usb 5-1: Using ep0 maxpacket: 8 [ 262.021445][ T6745] device veth0_vlan entered promiscuous mode [ 262.090364][ T46] device hsr_slave_0 left promiscuous mode [ 262.117067][ T46] device hsr_slave_1 left promiscuous mode [ 262.148305][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.169738][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.214505][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.233207][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.252564][ T46] device bridge_slave_1 left promiscuous mode [ 262.261637][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.273531][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.295531][ T46] device bridge_slave_0 left promiscuous mode [ 262.310170][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.371884][ T5584] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.391664][ T5584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.409640][ T5584] usb 5-1: Product: syz [ 262.421867][ T5584] usb 5-1: Manufacturer: syz [ 262.426616][ T5584] usb 5-1: SerialNumber: syz [ 262.440786][ T46] device veth1_macvtap left promiscuous mode [ 262.460576][ T46] device veth0_macvtap left promiscuous mode [ 262.489656][ T46] device veth1_vlan left promiscuous mode [ 262.505868][ T46] device veth0_vlan left promiscuous mode [ 262.725291][ T5584] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.091684][ T5584] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 263.311860][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.541980][ T5584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 263.553430][ T5584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 263.573968][ T5584] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.597049][ T5584] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.617546][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.659613][ T5584] usb 3-1: config 0 descriptor?? [ 263.666221][ T3648] usb 5-1: USB disconnect, device number 4 [ 263.682049][ T7138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 263.729143][ T3648] usblp0: removed [ 263.867111][ T3655] Bluetooth: hci0: command tx timeout [ 264.054506][ T46] team0 (unregistering): Port device team_slave_1 removed [ 264.130198][ T46] team0 (unregistering): Port device team_slave_0 removed [ 264.141251][ T7138] loop2: detected capacity change from 0 to 8 [ 264.224854][ T7138] SQUASHFS error: lzo decompression failed, data probably corrupt [ 264.234378][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.246173][ T7138] SQUASHFS error: Failed to read block 0x91: -5 [ 264.252717][ T7138] SQUASHFS error: Unable to read metadata cache entry [8f] [ 264.288486][ T7138] SQUASHFS error: Unable to read inode 0x11f [ 264.352483][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.383741][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.394269][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.394324][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.401776][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.401810][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.401914][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.401961][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.402004][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.402044][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.465283][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.472812][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.488853][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.497616][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.515923][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.531569][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.539206][ T5584] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.554945][ T5584] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 264.586773][ T5584] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.672580][ T3692] usb 3-1: USB disconnect, device number 6 [ 265.401656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.440390][ T46] bond0 (unregistering): Released all slaves [ 265.534680][ T7177] loop2: detected capacity change from 0 to 256 [ 265.568052][ T7177] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 265.641921][ T6745] device veth1_vlan entered promiscuous mode [ 265.812720][ T7012] device hsr_slave_0 entered promiscuous mode [ 265.867361][ T7012] device hsr_slave_1 entered promiscuous mode [ 265.941647][ T3655] Bluetooth: hci0: command tx timeout [ 265.981124][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.005798][ T7012] Cannot create hsr debugfs directory [ 266.389603][ T7199] loop2: detected capacity change from 0 to 64 [ 266.421743][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 266.421958][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.462932][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.494933][ T6745] device veth0_macvtap entered promiscuous mode [ 266.549561][ T6745] device veth1_macvtap entered promiscuous mode [ 266.606436][ T26] audit: type=1804 audit(1727095247.381:30): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.883" name="/newroot/52/file0/file0" dev="loop2" ino=21 res=1 errno=0 [ 266.700823][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.753940][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.769836][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.797681][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.829580][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.861450][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.895352][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.948737][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.973952][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.998132][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.022188][ T7215] loop4: detected capacity change from 0 to 1024 [ 267.025292][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.108333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.110957][ T7215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.147036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.177123][ T7220] loop2: detected capacity change from 0 to 64 [ 267.226763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.262718][ T7220] hfs: unable to parse mount options [ 267.270167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.287271][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.316887][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.353055][ T7220] loop2: detected capacity change from 0 to 256 [ 267.365483][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.378696][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.390084][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.418421][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.445666][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.461773][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.478863][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.488920][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.509296][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.531670][ T5584] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 267.545114][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.716298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.742379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.796572][ T6745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.826555][ T6745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.860690][ T6745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.900606][ T6745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.181309][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.210838][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.317701][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.337957][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.501760][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.825171][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.844059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.541642][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.590611][ T7254] ufs: You didn't specify the type of your ufs filesystem [ 269.590611][ T7254] [ 269.590611][ T7254] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 269.590611][ T7254] [ 269.590611][ T7254] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 269.630975][ T7254] ufs: ufstype=old is supported read-only [ 269.652758][ T7254] ufs: ufs_fill_super(): bad magic number [ 269.800965][ T7232] loop2: detected capacity change from 0 to 262144 [ 269.820675][ T7232] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.890 (7232) [ 269.848284][ T7232] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 269.859791][ T7232] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 269.869420][ T7232] BTRFS info (device loop2): enabling ssd optimizations [ 269.876498][ T7232] BTRFS info (device loop2): enabling auto defrag [ 269.882980][ T7232] BTRFS info (device loop2): using free space tree [ 269.931806][ T5584] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.955951][ T5584] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.034581][ T5584] usb 5-1: string descriptor 0 read error: -71 [ 270.054698][ T5584] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.094794][ T5584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.131389][ T5942] EXT4-fs (loop4): unmounting filesystem. [ 270.153452][ T5584] usb 5-1: can't set config #1, error -71 [ 270.222502][ T56] BTRFS warning (device loop2): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 270.252591][ T5584] usb 5-1: USB disconnect, device number 5 [ 270.333605][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040) [ 270.345924][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048) [ 270.357200][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056) [ 270.372790][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064) [ 270.385896][ T33] BTRFS warning (device loop2): checksum verify failed on logical 30670848 mirror 1 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 270.418844][ T7281] loop4: detected capacity change from 0 to 8 [ 270.462365][ T7281] squashfs: Unknown parameter '½FñÄâ$äÏ©çïdé-’ß;YD“<™3ñXß®³N‡qä4ÎSûÅ•ÆsÛµZþQPu•íµ2%l§W\YföáØÆ:?­x¶|:ãBÀ‡ýŸèE¥}Ce2ÖÎf«' [ 270.484832][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 30670848 (dev /dev/loop2 sector 76288) [ 270.497001][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 30674944 (dev /dev/loop2 sector 76296) [ 270.508895][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 30679040 (dev /dev/loop2 sector 76304) [ 270.520378][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 30683136 (dev /dev/loop2 sector 76312) [ 270.592433][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.679782][ T11] BTRFS warning (device loop2): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 270.839443][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 30457856 (dev /dev/loop2 sector 75872) [ 270.850640][ T7232] BTRFS info (device loop2): read error corrected: ino 0 off 30461952 (dev /dev/loop2 sector 75880) [ 270.912970][ T6000] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 271.622168][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.081627][ T7297] netlink: 'syz.3.902': attribute type 10 has an invalid length. [ 272.241104][ T7297] device syz_tun entered promiscuous mode [ 272.566295][ T7305] loop4: detected capacity change from 0 to 4096 [ 272.610442][ T7305] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 272.661817][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.729056][ T3659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.743242][ T3659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.752758][ T3654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.769956][ T3654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.777659][ T3654] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.792018][ T3654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.904062][ T7012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.005394][ T7012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.030157][ T7012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.141242][ T7012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.705822][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.878075][ T46] device hsr_slave_0 left promiscuous mode [ 273.885551][ T46] device hsr_slave_1 left promiscuous mode [ 273.897104][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.905492][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.922344][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.929798][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.960235][ T46] device bridge_slave_1 left promiscuous mode [ 273.966995][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.979156][ T46] device bridge_slave_0 left promiscuous mode [ 273.986885][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.018290][ T46] device veth1_macvtap left promiscuous mode [ 274.025332][ T46] device veth0_macvtap left promiscuous mode [ 274.031832][ T46] device veth1_vlan left promiscuous mode [ 274.037658][ T46] device veth0_vlan left promiscuous mode [ 274.309882][ T46] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 274.693512][ T46] team0 (unregistering): Port device team_slave_1 removed [ 274.750322][ T46] team0 (unregistering): Port device team_slave_0 removed [ 274.751703][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.808087][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.872725][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.917986][ T3655] Bluetooth: hci1: command tx timeout [ 275.549955][ T46] bond0 (unregistering): Released all slaves [ 275.692234][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.715610][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 275.769755][ T7333] ufs: You didn't specify the type of your ufs filesystem [ 275.769755][ T7333] [ 275.769755][ T7333] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 275.769755][ T7333] [ 275.769755][ T7333] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 275.801117][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.835172][ T7333] ufs: ufstype=old is supported read-only [ 275.841279][ T7333] ufs: ufs_fill_super(): bad magic number [ 275.872097][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.889027][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.908385][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.983348][ T7339] loop2: detected capacity change from 0 to 512 [ 276.005449][ T7339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.021111][ T7339] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 276.096414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.141184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.160763][ T7339] EXT4-fs (loop2): 1 orphan inode deleted [ 276.184907][ T7339] EXT4-fs (loop2): 1 truncate cleaned up [ 276.184934][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.190606][ T7339] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 276.197765][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.201577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.223365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.241282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.248484][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.280060][ T7339] EXT4-fs error (device loop2): ext4_lookup:1856: inode #15: comm syz.2.909: iget: bad extra_isize 46 (inode size 256) [ 276.299517][ T7339] EXT4-fs (loop2): Remounting filesystem read-only [ 276.312720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.321617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.322915][ T7339] EXT4-fs error (device loop2): __ext4_remount:6448: comm syz.2.909: Abort forced by user [ 276.376329][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.389796][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.438721][ T7339] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 276.458277][ T7308] device bridge_slave_0 entered promiscuous mode [ 276.475073][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.489704][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.501835][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.523782][ T7308] device bridge_slave_1 entered promiscuous mode [ 276.562938][ T6000] EXT4-fs (loop2): unmounting filesystem. [ 276.644486][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.701622][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.743326][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.781216][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.803355][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.819304][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.831687][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.862597][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.882675][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.905100][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.942425][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.981688][ T3655] Bluetooth: hci1: command tx timeout [ 276.987657][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.116783][ T7308] team0: Port device team_slave_0 added [ 277.137396][ T7012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.174709][ T7308] team0: Port device team_slave_1 added [ 277.385859][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.424485][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.441862][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.498545][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.575756][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.599427][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.611871][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.671935][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.754111][ T7353] loop2: detected capacity change from 0 to 32768 [ 277.786907][ T7353] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.913 (7353) [ 277.831728][ T7353] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 277.846288][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.861773][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.861848][ T7353] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 277.918053][ T7355] loop4: detected capacity change from 0 to 32768 [ 277.935841][ T7353] BTRFS info (device loop2): enabling auto defrag [ 277.944455][ T7353] BTRFS info (device loop2): max_inline at 0 [ 277.950502][ T7353] BTRFS info (device loop2): enabling ssd optimizations [ 277.959366][ T7353] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 277.969076][ T7355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.914 (7355) [ 277.981401][ T7353] BTRFS info (device loop2): use lzo compression, level 0 [ 277.989049][ T7353] BTRFS info (device loop2): using free space tree [ 278.010646][ T7355] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.033077][ T7308] device hsr_slave_0 entered promiscuous mode [ 278.052765][ T7355] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 278.061465][ T7355] BTRFS info (device loop4): using free space tree [ 278.067768][ T7308] device hsr_slave_1 entered promiscuous mode [ 278.088862][ T7308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.096681][ T7308] Cannot create hsr debugfs directory [ 278.145586][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.317477][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.335805][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.343588][ T7355] BTRFS info (device loop4): enabling ssd optimizations [ 278.383251][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.440172][ T6000] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 278.598759][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.656309][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.725207][ T5942] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.901753][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.073632][ T3659] Bluetooth: hci1: command tx timeout [ 279.190369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.213380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.245760][ T7012] device veth0_vlan entered promiscuous mode [ 279.274519][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.319809][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.388115][ T7012] device veth1_vlan entered promiscuous mode [ 279.580584][ T7012] device veth0_macvtap entered promiscuous mode [ 279.633504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.655589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.685191][ T7012] device veth1_macvtap entered promiscuous mode [ 279.714805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.744058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.952076][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.994430][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.021542][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.041992][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.053464][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.063667][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.075020][ T7408] loop2: detected capacity change from 0 to 40427 [ 280.077029][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.093547][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.105618][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.123710][ T7408] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 280.125890][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.130453][ T7408] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 280.152377][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.164518][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.176187][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.192329][ T7408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 280.203449][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.221619][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.241613][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.264927][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.276212][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.289064][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.301812][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.317143][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.322122][ T7408] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 280.329214][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.336142][ T7408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 280.372849][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.408987][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.421418][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.425055][ T7408] syz.2.915: attempt to access beyond end of device [ 280.425055][ T7408] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 280.435405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.480609][ T6000] syz-executor: attempt to access beyond end of device [ 280.480609][ T6000] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 280.487917][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.625053][ T7012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.648648][ T7012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.690120][ T7012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.721690][ T7012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.918240][ T7426] device netdevsim0 entered promiscuous mode [ 280.936916][ T7426] device macvtap1 entered promiscuous mode [ 280.966985][ T7426] device netdevsim0 left promiscuous mode [ 280.991707][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.141657][ T3659] Bluetooth: hci1: command tx timeout [ 281.200870][ T26] audit: type=1326 audit(1727095261.971:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.4.928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f3ad7def9 code=0x0 [ 281.269127][ T7437] input: syz1 as /devices/virtual/input/input16 [ 281.479289][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.511249][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.592488][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.617163][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.684333][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.774786][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.021686][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.055975][ T7308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.112301][ T7308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.445252][ T7308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.488085][ T7308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.739608][ T7470] ptrace attach of "./syz-executor exec"[6000] was attempted by ""[7470] [ 283.035496][ T46] device hsr_slave_0 left promiscuous mode [ 283.053426][ T46] device hsr_slave_1 left promiscuous mode [ 283.061649][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 283.070258][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.088524][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.145100][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.173337][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.191423][ T46] device bridge_slave_1 left promiscuous mode [ 283.211351][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.291399][ T46] device bridge_slave_0 left promiscuous mode [ 283.328656][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.377799][ T7464] loop4: detected capacity change from 0 to 40427 [ 283.435715][ T7464] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 283.463421][ T7464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 283.519548][ T46] device veth1_macvtap left promiscuous mode [ 283.537499][ T7464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.544197][ T46] device veth0_macvtap left promiscuous mode [ 283.560080][ T46] device veth1_vlan left promiscuous mode [ 283.566240][ T46] device veth0_vlan left promiscuous mode [ 283.713424][ T7464] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 283.723235][ T7464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.757835][ T7464] syz.4.934: attempt to access beyond end of device [ 283.757835][ T7464] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 283.882401][ T5942] syz-executor: attempt to access beyond end of device [ 283.882401][ T5942] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 284.101643][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.141676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 285.419680][ T46] team0 (unregistering): Port device team_slave_1 removed [ 285.510229][ T46] team0 (unregistering): Port device team_slave_0 removed [ 285.598982][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.671036][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.191670][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.495120][ T46] bond0 (unregistering): Released all slaves [ 286.789155][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.820054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.839302][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.863334][ T7308] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.910158][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.929271][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.987901][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.995108][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.031982][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.040881][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.060469][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.080012][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.087445][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.104359][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.157293][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.174723][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.198441][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.216951][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.238462][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.262591][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.282384][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.299625][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.310132][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.332880][ T7308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.355151][ T7308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.371288][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.381214][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.422385][ T5165] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.631954][ T7541] loop1: detected capacity change from 0 to 40427 [ 287.669643][ T7541] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 287.681632][ T5165] usb 5-1: Using ep0 maxpacket: 32 [ 287.695326][ T7541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 287.740457][ T7541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 287.772876][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.780884][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.818035][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.825368][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.871852][ T5165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.894182][ T5165] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.924784][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.935050][ T7541] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 287.952712][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.962234][ T7541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 287.963863][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.991298][ T5165] usb 5-1: config 0 descriptor?? [ 288.050753][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.062837][ T5165] hub 5-1:0.0: USB hub found [ 288.069196][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.082595][ T7541] syz.1.959: attempt to access beyond end of device [ 288.082595][ T7541] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 288.097046][ T7308] device veth0_vlan entered promiscuous mode [ 288.110926][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.145387][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.164175][ T7308] device veth1_vlan entered promiscuous mode [ 288.220768][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.240427][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 288.260490][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.271840][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.279930][ T5165] hub 5-1:0.0: 1 port detected [ 288.283353][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.300512][ T7308] device veth0_macvtap entered promiscuous mode [ 288.334880][ T7012] syz-executor: attempt to access beyond end of device [ 288.334880][ T7012] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 288.349829][ T7570] loop2: detected capacity change from 0 to 512 [ 288.362547][ T7308] device veth1_macvtap entered promiscuous mode [ 288.387112][ T7570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 288.398773][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.417575][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.429752][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.449321][ T7570] EXT4-fs (loop2): 1 truncate cleaned up [ 288.455253][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.455309][ T7570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.475323][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.546672][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.591807][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.621633][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.691372][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.712252][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.734460][ T6000] EXT4-fs (loop2): unmounting filesystem. [ 288.749018][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.787799][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.807536][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.834309][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.849709][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.879355][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.930930][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.941903][ T3106] hub 5-1:0.0: activate --> -90 [ 288.948447][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.959852][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.970442][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.981226][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.992009][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.013056][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.030181][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.049930][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.073374][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.083081][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.103497][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.121266][ T7308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.145293][ T7308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.159066][ T7308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.168741][ T7308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.251877][ T5584] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 289.301633][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.331716][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.340638][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.369732][ T3648] usb 5-1: USB disconnect, device number 6 [ 289.420866][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.465483][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.481301][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.499268][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.631966][ T5584] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.661122][ T5584] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.691604][ T5584] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 289.711002][ T5584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.729571][ T5584] usb 4-1: config 0 descriptor?? [ 289.734908][ T5165] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 289.992816][ T5165] usb 2-1: Using ep0 maxpacket: 32 [ 290.008055][ T7593] loop2: detected capacity change from 0 to 32768 [ 290.029625][ T5584] usb 4-1: USB disconnect, device number 10 [ 290.050621][ T7593] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.981 (7593) [ 290.116318][ T7593] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 290.127662][ T5165] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 290.155499][ T7593] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 290.170296][ T7593] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 290.182926][ T7593] BTRFS info (device loop2): use zstd compression, level 3 [ 290.190258][ T7593] BTRFS info (device loop2): using free space tree [ 290.294778][ T7593] BTRFS info (device loop2): enabling ssd optimizations [ 290.317764][ T26] audit: type=1800 audit(1727095271.091:32): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.981" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 290.339755][ T5165] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 290.351892][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.377396][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.390421][ T5165] usb 2-1: Product: syz [ 290.395321][ T5165] usb 2-1: Manufacturer: syz [ 290.399959][ T5165] usb 2-1: SerialNumber: syz [ 290.405400][ T26] audit: type=1800 audit(1727095271.181:33): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.981" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 290.408574][ T5165] usb 2-1: config 0 descriptor?? [ 290.452011][ T7587] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 290.477492][ T6000] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 290.488815][ T5165] hub 2-1:0.0: bad descriptor, ignoring hub [ 290.496616][ T5165] hub: probe of 2-1:0.0 failed with error -5 [ 290.506490][ T5165] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 290.911613][ T3973] usb 2-1: USB disconnect, device number 12 [ 291.110879][ T3716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.391636][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.864819][ T3716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.058454][ T3716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.111099][ T7639] loop2: detected capacity change from 0 to 4096 [ 292.275237][ T7644] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.277628][ T3716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.421628][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.477227][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.494054][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.506867][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.515138][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.525824][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 292.533294][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.584666][ T7639] syz.2.992 (7639) used greatest stack depth: 18352 bytes left [ 293.211593][ T3979] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 293.461791][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.502919][ T3979] usb 3-1: Using ep0 maxpacket: 32 [ 293.525481][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 293.622346][ T3979] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 293.831887][ T3979] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 293.852275][ T3979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.885069][ T3979] usb 3-1: Product: syz [ 293.925746][ T3979] usb 3-1: Manufacturer: syz [ 293.960966][ T3979] usb 3-1: SerialNumber: syz [ 293.980570][ T3979] usb 3-1: config 0 descriptor?? [ 294.036507][ T7660] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.085481][ T3979] hub 3-1:0.0: bad descriptor, ignoring hub [ 294.093445][ T3979] hub: probe of 3-1:0.0 failed with error -5 [ 294.112275][ T3979] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 294.133062][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.140305][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.169996][ T7649] device bridge_slave_0 entered promiscuous mode [ 294.195500][ T7690] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 294.225962][ T7690] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1003'. [ 294.301768][ T4456] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 294.345151][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.361776][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.372744][ T152] usb 3-1: USB disconnect, device number 7 [ 294.398684][ T7649] device bridge_slave_1 entered promiscuous mode [ 294.501684][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.581992][ T3659] Bluetooth: hci1: command tx timeout [ 294.596306][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.684028][ T4456] usb 4-1: config 0 has no interfaces? [ 294.792531][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.812615][ T7704] use of bytesused == 0 is deprecated and will be removed in the future, [ 294.841841][ T4456] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.851133][ T4456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.875822][ T7704] use the actual size instead. [ 294.884628][ T4456] usb 4-1: Product: syz [ 294.931545][ T4456] usb 4-1: Manufacturer: syz [ 294.936212][ T4456] usb 4-1: SerialNumber: syz [ 294.979427][ T7649] team0: Port device team_slave_0 added [ 294.996472][ T4456] usb 4-1: config 0 descriptor?? [ 295.168003][ T7716] block nbd2: NBD_DISCONNECT [ 295.182424][ T7716] block nbd2: Send disconnect failed -107 [ 295.190925][ T7712] block nbd2: Disconnected due to user request. [ 295.220949][ T7712] block nbd2: shutting down sockets [ 295.273855][ T3692] usb 4-1: USB disconnect, device number 11 [ 295.343293][ T7649] team0: Port device team_slave_1 added [ 295.475781][ T3716] device hsr_slave_0 left promiscuous mode [ 295.500082][ T3716] device hsr_slave_1 left promiscuous mode [ 295.538731][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.551668][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.563643][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.589163][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.615178][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.652224][ T3716] device bridge_slave_1 left promiscuous mode [ 295.660962][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.698246][ T3716] device bridge_slave_0 left promiscuous mode [ 295.719086][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.893355][ T3716] device veth1_macvtap left promiscuous mode [ 295.899949][ T3716] device veth0_macvtap left promiscuous mode [ 295.926520][ T3716] device veth1_vlan left promiscuous mode [ 295.942056][ T3716] device veth0_vlan left promiscuous mode [ 296.522185][ T3659] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 296.531320][ T3659] Bluetooth: hci0: Injecting HCI hardware error event [ 296.543065][ T3655] Bluetooth: hci0: hardware error 0x00 [ 296.581855][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.671655][ T3659] Bluetooth: hci1: command tx timeout [ 296.722470][ T7756] loop1: detected capacity change from 0 to 64 [ 296.977953][ T7758] loop1: detected capacity change from 0 to 128 [ 297.037080][ T7758] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 297.164765][ T7752] loop2: detected capacity change from 0 to 32768 [ 297.537937][ T7752] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 297.635760][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.728484][ T7770] loop1: detected capacity change from 0 to 512 [ 297.747560][ T7770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 297.809728][ T7770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 297.826467][ T7770] System zones: 1-12 [ 297.846868][ T7770] EXT4-fs (loop1): 1 truncate cleaned up [ 297.853409][ T7770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 297.875549][ T3716] team0 (unregistering): Port device team_slave_1 removed [ 297.962655][ T7012] EXT4-fs (loop1): unmounting filesystem. [ 297.968033][ T6000] ocfs2: Unmounting device (7,2) on (node local) [ 298.110597][ T3716] team0 (unregistering): Port device team_slave_0 removed [ 298.127923][ T7773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.270525][ T3716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.338005][ T3716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.581887][ T3655] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.661752][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.741906][ T3655] Bluetooth: hci1: command tx timeout [ 299.124314][ T7786] input: syz0 as /devices/virtual/input/input19 [ 299.290757][ T7788] loop1: detected capacity change from 0 to 1024 [ 299.345071][ T7788] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 299.405872][ T7012] EXT4-fs (loop1): unmounting filesystem. [ 299.426132][ T3716] bond0 (unregistering): Released all slaves [ 299.606714][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.624533][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.711630][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.715800][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.778838][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.808954][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.862600][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.022788][ T7649] device hsr_slave_0 entered promiscuous mode [ 300.049999][ T7649] device hsr_slave_1 entered promiscuous mode [ 300.171238][ T7810] loop2: detected capacity change from 0 to 256 [ 300.243566][ T7810] exfat: Bad value for 'errors' [ 300.323696][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.374202][ T7810] loop2: detected capacity change from 0 to 512 [ 300.410724][ T7810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 300.487972][ T7810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 300.551843][ T7810] EXT4-fs (loop2): 1 truncate cleaned up [ 300.557796][ T7810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 300.633589][ T7827] loop1: detected capacity change from 0 to 16 [ 300.647271][ T7827] erofs: (device loop1): mounted with root inode @ nid 36. [ 300.741676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.831628][ T3655] Bluetooth: hci1: command tx timeout [ 300.870811][ T6000] EXT4-fs (loop2): unmounting filesystem. [ 301.280790][ T7837] loop2: detected capacity change from 0 to 8192 [ 301.339240][ T7837] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 301.382729][ T7837] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 301.396726][ T7848] loop1: detected capacity change from 0 to 256 [ 301.438398][ T7837] REISERFS (device loop2): using ordered data mode [ 301.472750][ T7837] reiserfs: using flush barriers [ 301.479491][ T7848] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 301.493049][ T7837] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 301.531947][ T7837] REISERFS (device loop2): checking transaction log (loop2) [ 301.576662][ T7837] REISERFS (device loop2): Using r5 hash to sort names [ 301.650421][ T7837] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 301.791621][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.012446][ T3973] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 302.048690][ T7861] loop4: detected capacity change from 0 to 2048 [ 302.146732][ T7861] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 302.187362][ T7861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.214207][ T7649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.257041][ T7649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.275999][ T7868] loop2: detected capacity change from 0 to 256 [ 302.285994][ T7649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.301752][ T3973] usb 2-1: Using ep0 maxpacket: 32 [ 302.821622][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.711035][ T7649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.871620][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 303.891649][ T3973] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 303.899276][ T3973] usb 2-1: can't read configurations, error -71 [ 304.018364][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.077370][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.096339][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.125185][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.162248][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.178738][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.198714][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.205921][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.251957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.294545][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.321133][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.374243][ T7885] input: syz1 as /devices/virtual/input/input20 [ 304.388994][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.396228][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.462670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.543989][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.614165][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.667278][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.692850][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.737640][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.773529][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.832824][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.882069][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.912098][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 305.941645][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.981636][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.021634][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.061634][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.101627][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.405874][ T7649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.434900][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.447825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.141624][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 311.300936][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.331404][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.364838][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.416987][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 311.432629][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.475799][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.493156][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.522351][ T7649] device veth0_vlan entered promiscuous mode [ 311.550251][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.572530][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.596587][ T7649] device veth1_vlan entered promiscuous mode [ 311.691778][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.712259][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.741867][ T7649] device veth0_macvtap entered promiscuous mode [ 311.760754][ T7649] device veth1_macvtap entered promiscuous mode [ 311.842033][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.869575][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.900326][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.940081][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.978053][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.032115][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.083556][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.104471][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.120016][ T7928] loop1: detected capacity change from 0 to 32768 [ 312.126724][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.179522][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.191608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.196647][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.276870][ T7928] XFS (loop1): Mounting V5 Filesystem [ 312.289364][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.323395][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.345493][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.383074][ T7939] loop4: detected capacity change from 0 to 32768 [ 312.443380][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.446136][ T7928] XFS (loop1): Ending clean mount [ 312.456427][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.469006][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.491413][ T7939] non-latin1 character 0x163 found in JFS file name [ 312.512137][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.523069][ T7939] mount with iocharset=utf8 to access [ 312.538767][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.570665][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.606306][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.642929][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.661000][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.691573][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.711547][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.740147][ T7012] XFS (loop1): Unmounting Filesystem [ 312.765040][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.812716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.872376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.906356][ T7649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.946611][ T7649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.970102][ T7649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.006110][ T7649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.081616][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 313.231692][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.301335][ T7973] loop4: detected capacity change from 0 to 64 [ 313.356368][ T7065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.408814][ T7065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.470431][ T4568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.497925][ T4568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.512545][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.520816][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.271716][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.592268][ T7065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.872448][ T7065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.987540][ T7065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.143596][ T7065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.301627][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.405564][ T8030] loop2: detected capacity change from 0 to 128 [ 315.503043][ T8030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 315.560418][ T8030] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038 (0x7fffffff) [ 315.679169][ T3659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.702065][ T3659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.711372][ T3659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.725145][ T3659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.729137][ T6000] EXT4-fs (loop2): unmounting filesystem. [ 315.741218][ T3654] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 315.749326][ T3654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.147987][ T8051] input: syz1 as /devices/virtual/input/input21 [ 316.351622][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.437965][ T8054] loop2: detected capacity change from 0 to 2048 [ 316.450394][ T8056] loop1: detected capacity change from 0 to 512 [ 316.504291][ T8054] loop2: p1 < > p4 [ 316.511985][ T8054] loop2: p4 size 8388608 extends beyond EOD, truncated [ 316.601024][ T8056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 316.623223][ T8056] ext4 filesystem being mounted at /47/bus supports timestamps until 2038 (0x7fffffff) [ 316.672284][ T6000] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 316.713747][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.732300][ T6970] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.791656][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.800845][ T6871] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 316.817637][ T6970] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.854487][ T6970] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 316.871708][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.880991][ T6871] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 316.959894][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.989279][ T6871] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 317.020596][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.044066][ T7012] EXT4-fs (loop1): unmounting filesystem. [ 317.063427][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070034][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.142169][ T6871] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 317.192749][ T6871] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.218950][ T6871] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 317.275060][ T8035] chnl_net:caif_netlink_parms(): no params data found [ 317.391608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.450811][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 317.474252][ T6970] udevd[6970]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 317.580192][ T8090] loop2: detected capacity change from 0 to 2048 [ 317.720862][ T8090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.748309][ T8090] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038 (0x7fffffff) [ 317.781751][ T3655] Bluetooth: hci1: command tx timeout [ 317.844404][ T8090] EXT4-fs (loop2): shut down requested (2) [ 317.891986][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.899169][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.906878][ T6000] EXT4-fs (loop2): unmounting filesystem. [ 317.954567][ T8035] device bridge_slave_0 entered promiscuous mode [ 318.258142][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.266359][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.284394][ T8035] device bridge_slave_1 entered promiscuous mode [ 318.431733][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.471851][ T3983] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 318.645029][ T8035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.676083][ T8035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.704059][ T26] audit: type=1326 audit(1727095299.481:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 318.751690][ T3983] usb 5-1: Using ep0 maxpacket: 32 [ 318.806836][ T26] audit: type=1326 audit(1727095299.531:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 318.873561][ T7065] device hsr_slave_0 left promiscuous mode [ 318.884042][ T7065] device hsr_slave_1 left promiscuous mode [ 318.884950][ T26] audit: type=1326 audit(1727095299.531:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 318.916959][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.919844][ T26] audit: type=1326 audit(1727095299.531:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 318.931284][ T3983] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 318.947346][ T26] audit: type=1326 audit(1727095299.531:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 319.001921][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.030998][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.050680][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.071006][ T26] audit: type=1326 audit(1727095299.531:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 319.104156][ T7065] device bridge_slave_1 left promiscuous mode [ 319.111012][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.140289][ T7065] device bridge_slave_0 left promiscuous mode [ 319.146888][ T3655] Bluetooth: hci5: command 0x0406 tx timeout [ 319.172390][ T26] audit: type=1326 audit(1727095299.531:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 319.195240][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.195278][ T3983] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 319.221938][ T26] audit: type=1326 audit(1727095299.541:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 319.245946][ T26] audit: type=1326 audit(1727095299.541:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 319.268984][ T26] audit: type=1326 audit(1727095299.541:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceebb7def9 code=0x7ffc0000 [ 319.298774][ T3983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.331721][ T3983] usb 5-1: Product: syz [ 319.335948][ T3983] usb 5-1: Manufacturer: syz [ 319.388024][ T3983] usb 5-1: SerialNumber: syz [ 319.399719][ T7065] device veth1_macvtap left promiscuous mode [ 319.408994][ T7065] device veth0_macvtap left promiscuous mode [ 319.426369][ T3983] usb 5-1: config 0 descriptor?? [ 319.429348][ T7065] device veth1_vlan left promiscuous mode [ 319.461611][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.470143][ T7065] device veth0_vlan left promiscuous mode [ 319.482003][ T8112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.502459][ T3983] hub 5-1:0.0: bad descriptor, ignoring hub [ 319.508956][ T3983] hub: probe of 5-1:0.0 failed with error -5 [ 319.548997][ T3983] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 319.830190][ T8128] loop2: detected capacity change from 0 to 32768 [ 319.861778][ T3654] Bluetooth: hci1: command tx timeout [ 319.868312][ T152] usb 5-1: USB disconnect, device number 7 [ 319.881901][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 319.993118][ T8128] XFS (loop2): Mounting V5 Filesystem [ 320.061352][ T8128] XFS (loop2): Ending clean mount [ 320.417990][ T6000] XFS (loop2): Unmounting Filesystem [ 320.501625][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.754719][ T7065] team0 (unregistering): Port device team_slave_1 removed [ 320.833119][ T7065] team0 (unregistering): Port device team_slave_0 removed [ 320.897377][ T7065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.959670][ T7065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.551792][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.802867][ T7065] bond0 (unregistering): Released all slaves [ 321.941692][ T3654] Bluetooth: hci1: command tx timeout [ 322.094854][ T8035] team0: Port device team_slave_0 added [ 322.154724][ T8035] team0: Port device team_slave_1 added [ 322.401084][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.482860][ T8182] loop1: detected capacity change from 0 to 128 [ 322.512411][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.538983][ T8035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.551941][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.581528][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.649215][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.704104][ T8182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.720199][ T8035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.743371][ T8182] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 322.999243][ T8035] device hsr_slave_0 entered promiscuous mode [ 323.024985][ T8035] device hsr_slave_1 entered promiscuous mode [ 323.209034][ T7012] EXT4-fs (loop1): unmounting filesystem. [ 323.701755][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.808593][ T8199] loop2: detected capacity change from 0 to 32768 [ 323.876454][ T8199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1138 (8199) [ 323.956614][ T8199] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 323.976328][ T8199] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 324.013319][ T8199] BTRFS info (device loop2): using free space tree [ 324.021790][ T3659] Bluetooth: hci1: command tx timeout [ 324.271557][ T3654] Bluetooth: hci4: command 0x0406 tx timeout [ 324.291643][ T8199] BTRFS info (device loop2): enabling ssd optimizations [ 324.467431][ T8035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.489660][ T6000] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 324.503649][ T8035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.563094][ T8035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.605240][ T8035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.748250][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.207505][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.249996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.261170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.290841][ T8035] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.317532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.342604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.362140][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.369376][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.402887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.422432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.443034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.452039][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.459196][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.482073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.512307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.523195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.556716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.595628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.605573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.620247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.630269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.640495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.663221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.683533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.704601][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.781625][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.115935][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.126954][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.147068][ T8035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.192627][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.202350][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.215911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.226025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.238312][ T8035] device veth0_vlan entered promiscuous mode [ 326.245903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.255085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.269561][ T8035] device veth1_vlan entered promiscuous mode [ 326.298817][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.308055][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.322577][ T8035] device veth0_macvtap entered promiscuous mode [ 326.333271][ T8035] device veth1_macvtap entered promiscuous mode [ 326.356580][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.367918][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.379369][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.391805][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.402044][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.419682][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.429665][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.447461][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.457451][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.474858][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.495553][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.509143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.522217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.536123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.547806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.566139][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.577923][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.594247][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.608060][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.627501][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.639481][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.655156][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.668158][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.686692][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.699533][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.715512][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.729958][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.752936][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.774253][ T8035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.785236][ T8035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.794120][ T8035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.802965][ T8035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.821654][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.925417][ T7065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.952121][ T7065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.965846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 327.017729][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.033877][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.052998][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.861635][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.911637][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.145588][ T4568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.941618][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.120839][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.138692][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.149756][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.159545][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.169774][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.177328][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.418347][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 330.488387][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.495820][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.504008][ T28] INFO: task syz.3.526:5707 blocked for more than 143 seconds. [ 330.512008][ T28] Not tainted 6.1.111-syzkaller #0 [ 330.517678][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.528327][ T8259] device bridge_slave_0 entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.539078][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.561585][ T28] task:syz.3.526 state:D stack:24496 pid:5707 ppid:3644 flags:0x00004004 [ 330.570879][ T28] Call Trace: [ 330.575184][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.602778][ T8259] device bridge_slave_1 entered promiscuous mode [ 330.609878][ T28] [ 330.613452][ T28] __schedule+0x143f/0x4570 [ 330.618046][ T28] ? xlog_grant_head_wait+0x1ee/0xa00 [ 330.651590][ T28] ? release_firmware_map_entry+0x186/0x186 [ 330.657579][ T28] ? xlog_space_left+0xa9/0x2b0 [ 330.671600][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 330.677282][ T28] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 330.691669][ T28] schedule+0xbf/0x180 [ 330.695816][ T28] xlog_grant_head_wait+0x3b6/0xa00 [ 330.701064][ T28] xlog_grant_head_check+0x295/0x480 [ 330.721567][ T28] ? xlog_grant_push_ail+0xd0/0xd0 [ 330.772273][ T28] ? xlog_grant_push_threshold+0x1a3/0x1f0 [ 330.778665][ T28] xfs_log_reserve+0x3e1/0xc30 [ 330.813473][ T28] ? xlog_grant_head_check+0x480/0x480 [ 330.819020][ T28] ? xfs_mod_freecounter+0x1e2/0x490 [ 330.841600][ T28] xfs_trans_reserve+0x239/0x6a0 [ 330.846628][ T28] xfs_trans_alloc+0x41e/0x890 [ 330.851440][ T28] xfs_trans_alloc_inode+0x129/0x450 [ 330.866923][ T28] ? xfs_trans_dup+0x6a0/0x6a0 [ 330.880069][ T28] ? xfs_da_hashname+0x26a/0x370 [ 330.911612][ T28] ? xfs_attr_leaf_newentsize+0xd5/0x1d0 [ 330.917330][ T28] xfs_attr_set+0xa4e/0x1660 [ 330.941612][ T28] ? xfs_attr_leaf_shrink+0x410/0x410 [ 330.947064][ T28] ? look_up_lock_class+0x77/0x140 [ 330.983080][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.991792][ T28] ? register_lock_class+0x100/0x990 [ 330.997144][ T28] ? handle_mm_fault+0x3715/0x5340 [ 331.003889][ T28] ? is_dynamic_key+0x260/0x260 [ 331.008802][ T28] xfs_xattr_set+0x227/0x3a0 [ 331.013529][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 331.018370][ T28] ? evm_protect_xattr+0x366/0xb10 [ 331.031517][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 331.036393][ T28] __vfs_setxattr+0x3e7/0x420 [ 331.041153][ T28] __vfs_setxattr_noperm+0x12a/0x5e0 [ 331.062307][ T28] vfs_setxattr+0x21d/0x420 [ 331.066894][ T28] ? xattr_permission+0x4f0/0x4f0 [ 331.072772][ T28] ? _copy_from_user+0xb1/0x170 [ 331.077667][ T28] ? copy_user_enhanced_fast_string+0xa/0x40 [ 331.101785][ T28] ? _copy_from_user+0x109/0x170 [ 331.106808][ T28] setxattr+0x250/0x2b0 [ 331.111001][ T28] ? path_setxattr+0x2a0/0x2a0 [ 331.131561][ T28] ? __mnt_want_write+0x222/0x2a0 [ 331.136740][ T28] path_setxattr+0x1bc/0x2a0 [ 331.141372][ T28] ? simple_xattr_list_add+0xf0/0xf0 [ 331.181906][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 331.188843][ T28] __x64_sys_setxattr+0xb7/0xd0 [ 331.203757][ T28] do_syscall_64+0x3b/0xb0 [ 331.208253][ T28] ? clear_bhb_loop+0x45/0xa0 [ 331.220956][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.228295][ T28] RIP: 0033:0x7fd14597def9 [ 331.233236][ T28] RSP: 002b:00007fd1466f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 331.242010][ T28] RAX: ffffffffffffffda RBX: 00007fd145b35f80 RCX: 00007fd14597def9 [ 331.250040][ T28] RDX: 0000000020000100 RSI: 0000000020000340 RDI: 0000000020000040 [ 331.258722][ T28] RBP: 00007fd1459f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 331.267115][ T28] R10: 000000000000fc21 R11: 0000000000000246 R12: 0000000000000000 [ 331.275175][ T28] R13: 0000000000000000 R14: 00007fd145b35f80 R15: 00007ffc90537098 [ 331.283307][ T28] [ 331.286420][ T28] INFO: task syz.3.526:5760 blocked for more than 144 seconds. [ 331.295503][ T28] Not tainted 6.1.111-syzkaller #0 [ 331.301169][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.310298][ T28] task:syz.3.526 state:D stack:27616 pid:5760 ppid:3644 flags:0x00004004 [ 331.319904][ T28] Call Trace: [ 331.323612][ T28] [ 331.326578][ T28] __schedule+0x143f/0x4570 [ 331.331129][ T28] ? xlog_grant_head_wait+0x1ee/0xa00 [ 331.336606][ T28] ? release_firmware_map_entry+0x186/0x186 [ 331.342603][ T28] ? xlog_space_left+0xa9/0x2b0 [ 331.347492][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 331.353224][ T28] ? xlog_grant_push_threshold+0x166/0x1f0 [ 331.359089][ T28] schedule+0xbf/0x180 [ 331.363620][ T28] xlog_grant_head_wait+0x3b6/0xa00 [ 331.368892][ T28] xlog_grant_head_check+0x295/0x480 [ 331.374329][ T28] ? xlog_grant_push_ail+0xd0/0xd0 [ 331.379474][ T28] ? xlog_grant_push_threshold+0x166/0x1f0 [ 331.385605][ T28] xfs_log_reserve+0x3e1/0xc30 [ 331.390420][ T28] ? xlog_grant_head_check+0x480/0x480 [ 331.396722][ T28] ? xfs_mod_freecounter+0x1e2/0x490 [ 331.402128][ T28] xfs_trans_reserve+0x239/0x6a0 [ 331.407121][ T28] xfs_trans_alloc+0x41e/0x890 [ 331.412008][ T28] xfs_trans_alloc_icreate+0xc5/0x2b0 [ 331.417416][ T28] ? xfs_trans_alloc_inode+0x450/0x450 [ 331.422961][ T28] ? get_cached_acl+0xf7/0x600 [ 331.427787][ T28] xfs_create+0x749/0x1360 [ 331.432322][ T28] ? xfs_inode_inherit_flags2+0x340/0x340 [ 331.438111][ T28] ? posix_acl_create+0x155/0x420 [ 331.443262][ T28] xfs_generic_create+0x48d/0xd70 [ 331.448325][ T28] ? xfs_vn_tmpfile+0xc0/0xc0 [ 331.453161][ T28] ? from_kgid+0x1a3/0x730 [ 331.457617][ T28] ? common_perm+0x16a/0x1c0 [ 331.463856][ T28] ? apparmor_path_mkdir+0x204/0x2a0 [ 331.469190][ T28] ? generic_permission+0x21c/0x4f0 [ 331.474911][ T28] ? inode_permission+0xf7/0x450 [ 331.479873][ T28] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 331.485056][ T28] ? security_inode_mkdir+0xb4/0x100 [ 331.490369][ T28] vfs_mkdir+0x3b6/0x590 [ 331.495625][ T28] do_mkdirat+0x225/0x360 [ 331.500002][ T28] ? vfs_mkdir+0x590/0x590 [ 331.504530][ T28] ? getname_flags+0x1f9/0x4f0 [ 331.509328][ T28] __x64_sys_mkdirat+0x85/0x90 [ 331.514187][ T28] do_syscall_64+0x3b/0xb0 [ 331.518738][ T28] ? clear_bhb_loop+0x45/0xa0 [ 331.523528][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.529470][ T28] RIP: 0033:0x7fd14597def9 [ 331.534001][ T28] RSP: 002b:00007fd1466d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 331.543692][ T28] RAX: ffffffffffffffda RBX: 00007fd145b36058 RCX: 00007fd14597def9 [ 331.551784][ T28] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 331.559786][ T28] RBP: 00007fd1459f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 331.567948][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.576888][ T28] R13: 0000000000000000 R14: 00007fd145b36058 R15: 00007ffc90537098 [ 331.584989][ T28] [ 331.588091][ T28] [ 331.588091][ T28] Showing all locks held in the system: [ 331.622007][ T28] 1 lock held by rcu_tasks_kthre/12: [ 331.635405][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 331.668128][ T28] 1 lock held by rcu_tasks_trace/13: [ 331.675396][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 331.686919][ T28] 1 lock held by khungtaskd/28: [ 331.699760][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 331.713043][ T28] 2 locks held by kworker/u4:2/33: [ 331.718298][ T28] 2 locks held by kworker/0:2/152: [ 331.723918][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.734683][ T28] #1: ffffc90002defd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.747612][ T28] 2 locks held by getty/3397: [ 331.752589][ T28] #0: ffff88814bc35098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 331.762780][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 331.773260][ T28] 3 locks held by kworker/0:4/3688: [ 331.778497][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.789352][ T28] #1: ffffc9000409fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.799205][ T28] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 331.814275][ T28] 2 locks held by kworker/0:7/3692: [ 331.819514][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.830794][ T28] #1: ffffc900043ffd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.844273][ T28] 4 locks held by kworker/u4:7/4568: [ 331.849591][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.860055][ T28] #1: ffffc900030ffd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 331.875808][ T28] #2: ffffffff8e4ed450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 331.885378][ T28] #3: ffff8880773b22f8 (&devlink->lock_key#18){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2c0 [ 331.896397][ T28] 3 locks held by syz.3.526/5707: [ 331.901434][ T28] #0: ffff88807a42c460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 331.911960][ T28] #1: ffff888058a3c8f8 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 331.924159][ T28] #2: ffff88807a42c650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 331.935456][ T28] 3 locks held by syz.3.526/5760: [ 331.940528][ T28] #0: ffff88807a42c460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 331.950773][ T28] #1: ffff8880589c6fb8 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 331.963551][ T28] #2: ffff88807a42c650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0 [ 331.973814][ T28] 4 locks held by syz-executor/5891: [ 331.979112][ T28] #0: ffff888068e510b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 331.989169][ T28] #1: ffff888068e50078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 331.998947][ T28] #2: ffffffff8e650b88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 332.009791][ T28] #3: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 332.020920][ T28] 3 locks held by syz-executor/5942: [ 332.026350][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.034777][ T28] #0: ffff88807d7850b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 332.044882][ T28] #1: ffff88807d784078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 332.054691][ T28] #2: ffffffff8e650b88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 332.064828][ T28] 2 locks held by syz-executor/6000: [ 332.070127][ T28] #0: ffff88807bbf10b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 332.080138][ T28] #1: ffff88807bbf0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 332.089957][ T28] 1 lock held by syz-executor/7012: [ 332.095258][ T28] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 332.104803][ T28] [ 332.110492][ T28] ============================================= [ 332.110492][ T28] [ 332.121173][ T28] NMI backtrace for cpu 1 [ 332.125736][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 332.134020][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.144288][ T28] Call Trace: [ 332.147858][ T28] [ 332.150804][ T28] dump_stack_lvl+0x1e3/0x2cb [ 332.155531][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 332.161011][ T28] ? panic+0x764/0x764 [ 332.165088][ T28] ? vprintk_emit+0x622/0x740 [ 332.169784][ T28] ? printk_sprint+0x490/0x490 [ 332.174589][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 332.179780][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 332.184768][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 332.190941][ T28] ? _printk+0xd1/0x111 [ 332.195105][ T28] ? panic+0x764/0x764 [ 332.199184][ T28] ? __wake_up_klogd+0xcc/0x100 [ 332.204059][ T28] ? panic+0x764/0x764 [ 332.208158][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 332.214278][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 332.220380][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 332.226491][ T28] watchdog+0xf88/0xfd0 [ 332.230667][ T28] ? watchdog+0x1f8/0xfd0 [ 332.235101][ T28] kthread+0x28d/0x320 [ 332.239183][ T28] ? hungtask_pm_notify+0x50/0x50 [ 332.244219][ T28] ? kthread_blkcg+0xd0/0xd0 [ 332.248829][ T28] ret_from_fork+0x1f/0x30 [ 332.253270][ T28] [ 332.257586][ T28] Sending NMI from CPU 1 to CPUs 0: [ 332.262318][ T3654] Bluetooth: hci1: command tx timeout [ 332.263364][ C0] NMI backtrace for cpu 0 [ 332.263376][ C0] CPU: 0 PID: 3654 Comm: kworker/u5:3 Not tainted 6.1.111-syzkaller #0 [ 332.263395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.263405][ C0] Workqueue: hci1 hci_cmd_timeout [ 332.263425][ C0] RIP: 0010:io_serial_in+0x72/0xb0 [ 332.263445][ C0] Code: 94 ba d7 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 b5 3c 2f fd 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 89 e9 80 e1 07 38 c1 7c ad 48 89 ef [ 332.263460][ C0] RSP: 0018:ffffc90003eaf358 EFLAGS: 00000002 [ 332.263473][ C0] RAX: 1ffffffff2ed7300 RBX: ffffffff976b9e60 RCX: 0000000000000000 [ 332.263486][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 332.263496][ C0] RBP: 0000000000000000 R08: ffffffff84b2f4a2 R09: ffffed100497e047 [ 332.263508][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff97375e30 [ 332.263520][ C0] R13: 00000000000026fa R14: 00000000000003fd R15: dffffc0000000000 [ 332.263532][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 332.263547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.263558][ C0] CR2: 00007f9cfb467d60 CR3: 000000002dcb2000 CR4: 00000000003506f0 [ 332.263573][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.263583][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.263594][ C0] Call Trace: [ 332.263599][ C0] [ 332.263605][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 332.263633][ C0] ? read_lock_is_recursive+0x10/0x10 [ 332.263661][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 332.263689][ C0] ? nmi_handle+0x25/0x440 [ 332.263724][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 332.263750][ C0] ? nmi_handle+0x12e/0x440 [ 332.263776][ C0] ? nmi_handle+0x25/0x440 [ 332.263802][ C0] ? io_serial_in+0x72/0xb0 [ 332.263817][ C0] ? default_do_nmi+0x62/0x150 [ 332.263835][ C0] ? exc_nmi+0xa8/0x100 [ 332.263852][ C0] ? end_repeat_nmi+0x16/0x31 [ 332.263880][ C0] ? io_serial_in+0x42/0xb0 [ 332.263898][ C0] ? io_serial_in+0x72/0xb0 [ 332.263914][ C0] ? io_serial_in+0x72/0xb0 [ 332.263932][ C0] ? io_serial_in+0x72/0xb0 [ 332.263948][ C0] [ 332.263953][ C0] [ 332.263959][ C0] serial8250_console_write+0x1057/0x1750 [ 332.263988][ C0] ? serial8250_set_defaults+0x5f0/0x5f0 [ 332.264005][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 332.264029][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 332.264050][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 332.264073][ C0] console_emit_next_record+0xbb4/0x1000 [ 332.264093][ C0] ? console_emit_next_record+0xa9c/0x1000 [ 332.264122][ C0] ? info_print_prefix+0x300/0x300 [ 332.264144][ C0] ? mark_lock+0x9a/0x340 [ 332.264171][ C0] ? __lock_acquire+0x125b/0x1f80 [ 332.264214][ C0] console_unlock+0x278/0x7c0 [ 332.264243][ C0] ? vprintk_emit+0x740/0x740 [ 332.264268][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 332.264289][ C0] ? vprintk_emit+0x340/0x740 [ 332.264314][ C0] vprintk_emit+0x523/0x740 [ 332.264341][ C0] ? printk_sprint+0x490/0x490 [ 332.264365][ C0] ? register_lock_class+0x100/0x990 [ 332.264394][ C0] ? is_dynamic_key+0x260/0x260 [ 332.264422][ C0] _printk+0xd1/0x111 [ 332.264444][ C0] ? panic+0x764/0x764 [ 332.264468][ C0] bt_err+0x123/0x170 [ 332.264486][ C0] ? process_one_work+0x86a/0x11d0 [ 332.264506][ C0] ? bt_warn+0x170/0x170 [ 332.264522][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 332.264550][ C0] ? print_irqtrace_events+0x210/0x210 [ 332.264573][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 332.264597][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 332.264615][ C0] ? process_one_work+0x7a9/0x11d0 [ 332.264634][ C0] hci_cmd_timeout+0x100/0x1e0 [ 332.264651][ C0] ? process_one_work+0x7a9/0x11d0 [ 332.264670][ C0] process_one_work+0x8a9/0x11d0 [ 332.264699][ C0] ? worker_detach_from_pool+0x260/0x260 [ 332.264721][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 332.264742][ C0] ? kthread_data+0x4e/0xc0 [ 332.264770][ C0] ? wq_worker_running+0x97/0x190 [ 332.264788][ C0] worker_thread+0xa47/0x1200 [ 332.264810][ C0] ? release_firmware_map_entry+0x186/0x186 [ 332.264848][ C0] kthread+0x28d/0x320 [ 332.264862][ C0] ? worker_clr_flags+0x190/0x190 [ 332.264880][ C0] ? kthread_blkcg+0xd0/0xd0 [ 332.264896][ C0] ret_from_fork+0x1f/0x30 [ 332.264928][ C0] [ 332.657368][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 332.657389][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 332.657414][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 332.657427][ T28] Call Trace: [ 332.657436][ T28] [ 332.657444][ T28] dump_stack_lvl+0x1e3/0x2cb [ 332.657489][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 332.657526][ T28] ? panic+0x764/0x764 [ 332.657551][ T28] ? llist_add_batch+0x160/0x1d0 [ 332.657589][ T28] ? vscnprintf+0x59/0x80 [ 332.657619][ T28] panic+0x318/0x764 [ 332.657647][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 332.657684][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 332.657717][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 332.657753][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 332.657793][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 332.657835][ T28] watchdog+0xfc7/0xfd0 [ 332.657872][ T28] ? watchdog+0x1f8/0xfd0 [ 332.657907][ T28] kthread+0x28d/0x320 [ 332.657927][ T28] ? hungtask_pm_notify+0x50/0x50 [ 332.657955][ T28] ? kthread_blkcg+0xd0/0xd0 [ 332.657979][ T28] ret_from_fork+0x1f/0x30 [ 332.658024][ T28] [ 332.659184][ T28] Kernel Offset: disabled [ 332.822775][ T28] Rebooting in 86400 seconds..