last executing test programs: 21.068716732s ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) signalfd4(r0, &(0x7f0000000200), 0x8, 0x0) 20.942948662s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x210820, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='000000']) 20.873460663s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 19.650628852s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 19.46945884s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0xa, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, &(0x7f0000000040)) 19.353687448s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/85, 0x55}], 0x5}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 3.0926918s ago: executing program 3: r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xab\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) pread64(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x0) 2.977344968s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000200)="1200000032007b00000000000000a14f83c4", 0x12, 0x0, 0x0, 0x0) 2.863076256s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x1c4, 0x10, 0x633, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "7dc6a016a5dd446382587fffe765a719947603cd166e7d7072d7f3d77b94d14aa74228a1b57005583e155fae907a97736a14adebc45bd3d7a66164c7dc9edc4dff"}}]}, 0x1c4}}, 0x0) 2.783825348s ago: executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x203c, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_complete(r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xbb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0011aa"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f00000000c0)={0x60002019}) 2.761724652s ago: executing program 3: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1060, 0x2000}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$FUSE_ATTR(r1, &(0x7f0000000600)={0x78}, 0x78) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x6, 0x0) 2.417786155s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) io_setup(0xa, &(0x7f00000001c0)=0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x180a, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.274243268s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000100d300000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.183440261s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.943623389s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)={'syz1'}, 0x4) sendto$inet(r0, &(0x7f0000000800)="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", 0x1000, 0x40000, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0x1, 0x8, 0xa7, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @rand_addr=0x74010141, {[@generic={0x44, 0x11, "f687f946ff6d83ae717d4f9b6e8ae4"}, @ssrr={0x89, 0x13, 0x3f, [@broadcast, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}]}, @generic={0x82, 0x10, "8ac59551007a6b7b6a2c1c908ca7"}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000000008346000000000000009d699928c0b44ceb86367b56c1407ea4c543df957868908f24e12d6674f75cd90b6c33e0ae8e4575ec354d836630ec443a3a2942fa77f3106c2208857c29749f4a66cd4f6ee0ad1f5b3f461b12eb5f895d931ca04af63d91c8b89184a2e351f3be1f9dcafcd25822d2e2ff8b317fc8a3532287ae97baff21ac550665780d3654"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r5 = socket(0x2, 0x3, 0x23) setsockopt$MRT_ADD_VIF(r5, 0x0, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={@private0, 0x1b, r6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r9, 0xffffffffffffffff, 0x2) fchdir(r9) r10 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x12, &(0x7f0000000380)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x2, 0x9, 0x20, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r7, r9, r11, r8, r9, r9], &(0x7f0000000b80), 0x10, 0x4}, 0x90) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r11, &(0x7f0000004000)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0xb801, 0x9, 0x12, r11, 0x7ff, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xa}, 0x48) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getaddr={0x28, 0x16, 0x100, 0x70bd2b, 0x25dfdbfc, {0x2, 0x1f, 0x8, 0x1, r3}, [@IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0xdbb}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.395677494s ago: executing program 0: r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xab\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) pread64(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x0) 1.368403858s ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000200)="1200000032007b00000000000000a14f83c4", 0x12, 0x0, 0x0, 0x0) 1.336006863s ago: executing program 3: ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000140)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f00000000c0)=ANY=[@ANYBLOB="050d3e"]}, @name="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"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 1.265142754s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCGETS2(r0, 0x5405, &(0x7f0000000000)) 1.237112288s ago: executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="65f4"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.151080302s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000200000000000000000085000000070000001801000020646c2500000000002020607b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000002100)='ext4_load_inode\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") 1.036350649s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @md5sig={0x13, 0x12, "c851616c0500cb080000000000e79490"}, @sack={0x5, 0xa, [0x0, 0x0]}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @mptcp=@capable={0x1e, 0xc}]}}}}}}}, 0x0) 889.357682ms ago: executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x30, 0x2, 0x0, "9c3e098e0000f4ba89591d8a6b97000000002b0003040b000000000000002300"}) 855.443827ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000100d300000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 704.699581ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 675.972645ms ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_vlan\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)=""/84, 0x54}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0xfea0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xfffffff0, 0x2}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r7, &(0x7f0000000000), 0x12) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0xffff) pipe(&(0x7f0000000080)) pipe(&(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="a2c63464c92856ea4ce0de2c3d8f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 324.634269ms ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) syslog(0x0, 0x0, 0x0) 100.743955ms ago: executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40187013, &(0x7f0000000040)={0x1}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) setpgid(0x0, r2) r3 = syz_open_procfs(r2, &(0x7f0000000040)='sched\x00') getpgrp(0xffffffffffffffff) inotify_init1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f0000000040)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x3, 0x9, {{0x1e, 0x4, 0x3, 0x7, 0x78, 0x68, 0x0, 0x3f, 0x29, 0x0, @broadcast, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x54, [@multicast2, @empty, @multicast2, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xfc, 0x0, 0x2, [0x1, 0xb9, 0xf7, 0x9, 0x8001, 0x6]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x0, 0x6, "60cd437b"}, {0x1, 0x2}, {0x2, 0xd, "44a312cd7546e5ba204d15"}, {0x2, 0x6, "e7f34652"}, {0x2, 0xb, "176781837efa6891d6"}, {0x1, 0x2}]}]}}}}}) socket(0x11, 0x800000003, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000002020692500000000002020207b1af8ff00000000bfa100000000000007f9fffff7ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x20000400) r5 = socket(0x22, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x27, 0x28, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x90) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe1a, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x270}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) 56.837551ms ago: executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x10000, 0x4) sendmmsg$inet6(r0, &(0x7f0000005000)=[{{&(0x7f0000002680)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f00000036c0)=[{&(0x7f00000026c0)="c7", 0x1}], 0x1}}], 0x1, 0x24040040) 0s ago: executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x6}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x18, 0x0, 0xe}, 0x90) kernel console output (not intermixed with test programs): romiscuous mode [ 212.186930][ T6457] device veth1_macvtap entered promiscuous mode [ 212.232131][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.260740][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.301333][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.330713][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.341097][ T6636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (393216 ns). Using initial count to start timer. [ 212.359772][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.399390][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.429517][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.462215][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.496571][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.529317][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.542562][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.568021][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.597820][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.600780][ T6616] loop4: detected capacity change from 0 to 32768 [ 212.658855][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.687139][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.716071][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.749336][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.777999][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.799668][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.823961][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.844206][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.865515][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.882964][ T6639] device vlan0 entered promiscuous mode [ 213.046564][ T6642] device vlan0 left promiscuous mode [ 213.073139][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.089726][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.118792][ T6457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.148013][ T6457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.193888][ T6457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.202630][ T6457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.438547][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.460741][ T6668] loop2: detected capacity change from 0 to 256 [ 213.491504][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.513815][ T3978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.550517][ T3978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.552564][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.589847][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.367815][ T6663] loop0: detected capacity change from 0 to 32768 [ 214.410708][ T6667] loop4: detected capacity change from 0 to 32768 [ 214.574565][ T6676] loop1: detected capacity change from 0 to 32768 [ 214.671045][ T6676] XFS (loop1): Mounting V5 Filesystem [ 214.755495][ T6676] XFS (loop1): Ending clean mount [ 214.853498][ T6699] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 214.988044][ T6703] loop4: detected capacity change from 0 to 256 [ 215.053019][ T6703] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 215.066410][ T6709] loop3: detected capacity change from 0 to 256 [ 215.083817][ T6709] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 215.288657][ T6709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (393216 ns). Using initial count to start timer. [ 215.450190][ T6457] XFS (loop1): Unmounting Filesystem [ 215.531239][ T3972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.542172][ T3617] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 215.644544][ T3972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.778927][ T3972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.890788][ T3972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.981222][ T3617] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 216.004063][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.029155][ T3617] usb 1-1: config 0 descriptor?? [ 216.153105][ T6718] loop4: detected capacity change from 0 to 32768 [ 216.170888][ T6720] loop2: detected capacity change from 0 to 32768 [ 216.448431][ T3584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.459227][ T3584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.468125][ T3584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.481282][ T3584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.490645][ T3584] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.499163][ T3584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.634792][ T6731] device vlan0 entered promiscuous mode [ 216.713709][ T6731] device vlan0 left promiscuous mode [ 217.006468][ T6728] loop2: detected capacity change from 0 to 32768 [ 217.023307][ T6728] /dev/loop2: Can't open blockdev [ 217.059075][ T6724] chnl_net:caif_netlink_parms(): no params data found [ 217.164231][ T3617] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 217.198702][ T3617] asix: probe of 1-1:0.0 failed with error -71 [ 217.212581][ T6745] loop4: detected capacity change from 0 to 8192 [ 217.222724][ T3617] usb 1-1: USB disconnect, device number 7 [ 217.230181][ T6745] REISERFS warning (device loop4): super-6506 reiserfs_getopt: empty argument for "resize" [ 217.230181][ T6745] [ 217.270417][ T3972] device hsr_slave_0 left promiscuous mode [ 217.282539][ T3972] device hsr_slave_1 left promiscuous mode [ 217.291042][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.306112][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.316051][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.323601][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.344487][ T3972] device bridge_slave_1 left promiscuous mode [ 217.353110][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.374764][ T3972] device bridge_slave_0 left promiscuous mode [ 217.381001][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.407937][ T3972] device veth1_macvtap left promiscuous mode [ 217.420567][ T3972] device veth0_macvtap left promiscuous mode [ 217.427076][ T3972] device veth1_vlan left promiscuous mode [ 217.432951][ T3972] device veth0_vlan left promiscuous mode [ 217.626864][ T3972] team0 (unregistering): Port device team_slave_1 removed [ 217.640543][ T3972] team0 (unregistering): Port device team_slave_0 removed [ 217.666865][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.682680][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.791621][ T3972] bond0 (unregistering): Released all slaves [ 218.035493][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.050142][ T6752] loop0: detected capacity change from 0 to 32768 [ 218.058075][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.066517][ T6724] device bridge_slave_0 entered promiscuous mode [ 218.075716][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.082808][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.091006][ T6724] device bridge_slave_1 entered promiscuous mode [ 218.159394][ T6724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.177020][ T6724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.372815][ T6724] team0: Port device team_slave_0 added [ 218.429227][ T6724] team0: Port device team_slave_1 added [ 218.535021][ T3584] Bluetooth: hci4: command tx timeout [ 218.556496][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.563568][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.595474][ T6724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.611793][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.621254][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.655699][ T6724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.743321][ T6724] device hsr_slave_0 entered promiscuous mode [ 218.783114][ T6724] device hsr_slave_1 entered promiscuous mode [ 219.129277][ T3587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.145515][ T6757] loop3: detected capacity change from 0 to 32768 [ 219.150342][ T3587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.160327][ T3587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.183989][ T3587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.193106][ T3587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.200477][ T3587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.511364][ T6777] loop0: detected capacity change from 0 to 8192 [ 219.564037][ T6777] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "resize" [ 219.564037][ T6777] [ 219.895720][ T6724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.915040][ T6724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.941824][ T6774] chnl_net:caif_netlink_parms(): no params data found [ 219.955617][ T6724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.973180][ T6724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.040690][ T6773] loop4: detected capacity change from 0 to 32768 [ 220.112025][ T6773] XFS (loop4): Mounting V5 Filesystem [ 220.180000][ T6773] XFS (loop4): Ending clean mount [ 220.213168][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.243688][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.264081][ T6774] device bridge_slave_0 entered promiscuous mode [ 220.289395][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.322115][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.335930][ T6774] device bridge_slave_1 entered promiscuous mode [ 220.369277][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.487233][ T6774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.508044][ T6774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.538709][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.547717][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.570381][ T6724] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.589226][ T6774] team0: Port device team_slave_0 added [ 220.603964][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.614202][ T3584] Bluetooth: hci4: command tx timeout [ 220.621019][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.629702][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.636824][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.652516][ T6774] team0: Port device team_slave_1 added [ 220.675116][ T6328] XFS (loop4): Unmounting Filesystem [ 220.707258][ T6774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.738035][ T6774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.804150][ T6774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.824885][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.832886][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.860015][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.878862][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.886013][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.919720][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.944911][ T6774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.959046][ T6774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.987666][ T6774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.031001][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.040516][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.050920][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.059562][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.068471][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.077134][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.085631][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.094619][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.102744][ T6806] device vlan0 entered promiscuous mode [ 221.138810][ T6724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.164533][ T6724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.215620][ T6807] device vlan0 left promiscuous mode [ 221.254683][ T3584] Bluetooth: hci2: command tx timeout [ 221.283811][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.293334][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.318355][ T6774] device hsr_slave_0 entered promiscuous mode [ 221.352350][ T6774] device hsr_slave_1 entered promiscuous mode [ 221.373495][ T6774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.419530][ T6774] Cannot create hsr debugfs directory [ 221.562126][ T3587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.572487][ T3587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.580604][ T3587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.588816][ T3587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.596409][ T3587] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.603671][ T3587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.776301][ T3972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.828424][ T6818] loop3: detected capacity change from 0 to 8192 [ 221.841201][ T6818] REISERFS warning (device loop3): super-6506 reiserfs_getopt: empty argument for "resize" [ 221.841201][ T6818] [ 221.891835][ T6824] mmap: syz-executor.0 (6824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.905485][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.924104][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.956638][ T3972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.995984][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.027995][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.057128][ T6774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.094755][ T3972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.113758][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.171376][ T6774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.220394][ T3972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.253978][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.262625][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.298017][ T6835] loop3: detected capacity change from 0 to 2048 [ 222.322650][ T6774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.343092][ T6835] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 222.362134][ T6835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.420480][ T6841] AppArmor: change_hat: Invalid input '0' [ 222.545578][ T6815] chnl_net:caif_netlink_parms(): no params data found [ 222.571491][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.574070][ T6843] loop0: detected capacity change from 0 to 256 [ 222.580185][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.596780][ T6724] device veth0_vlan entered promiscuous mode [ 222.600215][ T6843] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 222.608967][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.623360][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.701958][ T3587] Bluetooth: hci4: command tx timeout [ 223.285972][ T6774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.334581][ T3587] Bluetooth: hci2: command tx timeout [ 223.391262][ T6724] device veth1_vlan entered promiscuous mode [ 223.515669][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.552278][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.566475][ T6815] device bridge_slave_0 entered promiscuous mode [ 223.575801][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.585572][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.598666][ T6724] device veth0_macvtap entered promiscuous mode [ 223.612375][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.621650][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.630091][ T6815] device bridge_slave_1 entered promiscuous mode [ 223.640397][ T6724] device veth1_macvtap entered promiscuous mode [ 223.654052][ T3587] Bluetooth: hci0: command tx timeout [ 223.729830][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.759467][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.770267][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.780256][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.790930][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.800860][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.811416][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.822499][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.833193][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.845728][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.855378][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.893643][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.914569][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.924377][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.933089][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.963022][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.979613][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.989577][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.000056][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.009894][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.020405][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.030403][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.042387][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.056220][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.075248][ T6774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.090705][ T6815] team0: Port device team_slave_0 added [ 224.108632][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.140658][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.153591][ T6724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.184545][ T6724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.193291][ T6724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.225540][ T6724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.288224][ T6774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.312173][ T6815] team0: Port device team_slave_1 added [ 224.321115][ T6774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.330424][ T6877] loop0: detected capacity change from 0 to 512 [ 224.348084][ T6879] AppArmor: change_hat: Invalid input '0' [ 224.359680][ T6774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.440034][ T6877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.503047][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.513364][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.534080][ T6877] ext4 filesystem being mounted at /root/syzkaller-testdir4293125488/syzkaller.IAhDvc/48/file0 supports timestamps until 2038 (0x7fffffff) [ 224.563652][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.604515][ T6888] loop3: detected capacity change from 0 to 2048 [ 224.621111][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.632312][ T6888] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 224.645597][ T6888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.655525][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.662488][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.692217][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.732590][ T6815] device hsr_slave_0 entered promiscuous mode [ 224.739541][ T6815] device hsr_slave_1 entered promiscuous mode [ 224.746445][ T6815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.754079][ T6815] Cannot create hsr debugfs directory [ 224.774293][ T3587] Bluetooth: hci4: command tx timeout [ 224.909150][ T6889] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 225.231274][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.312799][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.587922][ T3587] Bluetooth: hci2: command tx timeout [ 225.670612][ T3642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.700033][ T3642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.734169][ T3584] Bluetooth: hci0: command tx timeout [ 225.781919][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.808581][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.962632][ T6901] loop3: detected capacity change from 0 to 2048 [ 225.983573][ T6901] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 226.115647][ T6901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.625205][ T6905] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 227.514886][ T6774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.664361][ T3584] Bluetooth: hci2: command tx timeout [ 227.717259][ T6916] AppArmor: change_hat: Invalid input '0' [ 227.727216][ T6774] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.768255][ T6920] loop1: detected capacity change from 0 to 64 [ 227.788034][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.811875][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.824327][ T3584] Bluetooth: hci0: command tx timeout [ 227.901429][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.931922][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.934532][ T6925] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 227.955267][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.962478][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.979665][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.994867][ T6927] loop3: detected capacity change from 0 to 2048 [ 228.003755][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.012774][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.016820][ T6927] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 228.019913][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.038472][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.050817][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.064174][ T6927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.069388][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.088189][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.099033][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.107257][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.139508][ T6933] loop1: detected capacity change from 0 to 2048 [ 228.171029][ T6933] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 228.196202][ T6933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.503952][ T3584] Bluetooth: hci0: command tx timeout [ 230.518091][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.547314][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.630167][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.674017][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.720259][ T6774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.741971][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.770591][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.779998][ T6945] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 230.792290][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.896785][ T3972] device hsr_slave_0 left promiscuous mode [ 230.916870][ T3972] device hsr_slave_1 left promiscuous mode [ 230.941065][ T6949] loop1: detected capacity change from 0 to 2048 [ 230.954987][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.962531][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.993156][ T6949] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 231.013395][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.022091][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.044564][ T6949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.060854][ T3972] device bridge_slave_1 left promiscuous mode [ 231.071396][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.276469][ T3972] device bridge_slave_0 left promiscuous mode [ 231.286197][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.509488][ T3972] device hsr_slave_0 left promiscuous mode [ 231.589460][ T3972] device hsr_slave_1 left promiscuous mode [ 231.681045][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.911051][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.951778][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.984049][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.026324][ T3972] device bridge_slave_1 left promiscuous mode [ 232.050600][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.115303][ T3972] device bridge_slave_0 left promiscuous mode [ 232.121513][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.171530][ T6962] loop1: detected capacity change from 0 to 64 [ 232.190493][ T3972] device veth1_macvtap left promiscuous mode [ 232.211357][ T3972] device veth0_macvtap left promiscuous mode [ 232.232333][ T3972] device veth1_vlan left promiscuous mode [ 232.250741][ T3972] device veth0_vlan left promiscuous mode [ 232.272489][ T3972] device veth1_macvtap left promiscuous mode [ 232.292164][ T3972] device veth0_macvtap left promiscuous mode [ 232.306565][ T3972] device veth1_vlan left promiscuous mode [ 232.310581][ T6964] loop1: detected capacity change from 0 to 2048 [ 232.318143][ T3972] device veth0_vlan left promiscuous mode [ 232.349812][ T6964] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.385413][ T6964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.846942][ T6958] loop3: detected capacity change from 0 to 32768 [ 232.998715][ T6958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6958) [ 233.430383][ T6958] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.440928][ T27] audit: type=1804 audit(1717428050.374:230): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4293125488/syzkaller.IAhDvc/56/bus" dev="sda1" ino=1944 res=1 errno=0 [ 233.454076][ T6958] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 233.500162][ T6958] BTRFS info (device loop3): setting nodatacow, compression disabled [ 233.520716][ T6958] BTRFS info (device loop3): doing ref verification [ 233.534684][ T6958] BTRFS info (device loop3): enabling auto defrag [ 233.547887][ T6958] BTRFS info (device loop3): max_inline at 0 [ 233.560739][ T6958] BTRFS info (device loop3): using free space tree [ 233.839643][ T3972] team0 (unregistering): Port device team_slave_1 removed [ 234.029362][ T3972] team0 (unregistering): Port device team_slave_0 removed [ 234.079539][ T6958] BTRFS info (device loop3): enabling ssd optimizations [ 234.302027][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.562691][ T6988] loop1: detected capacity change from 0 to 2048 [ 234.581686][ T6354] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.603377][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.618350][ T6988] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 234.695214][ T6988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.010254][ T3972] bond0 (unregistering): Released all slaves [ 235.765394][ T3972] team0 (unregistering): Port device team_slave_1 removed [ 235.787980][ T3972] team0 (unregistering): Port device team_slave_0 removed [ 235.814336][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.848645][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.884291][ T7004] loop1: detected capacity change from 0 to 64 [ 236.070494][ T3972] bond0 (unregistering): Released all slaves [ 236.163783][ T6815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.181472][ T7010] loop3: detected capacity change from 0 to 1024 [ 236.200333][ T6815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.220583][ T6815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.237900][ T6815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.461991][ T7016] loop3: detected capacity change from 0 to 1024 [ 236.470143][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.493078][ T7016] EXT4-fs (loop3): can't mount with commit=4, fs mounted w/o journal [ 236.514530][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.526099][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.549933][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.579577][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.589656][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.634621][ T6774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.642473][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.661040][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.687499][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.694749][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.714453][ T7022] loop3: detected capacity change from 0 to 16 [ 236.721029][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.730178][ T7022] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 236.737563][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.752007][ T7022] cramfs: empty filesystem [ 236.757960][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.765120][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.789726][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.803214][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.835356][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.844616][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.853417][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.870798][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.881406][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.898007][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.906869][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.915625][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.927343][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.940141][ T6815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.016580][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.043708][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.061020][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.086957][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.122890][ T6774] device veth0_vlan entered promiscuous mode [ 237.147735][ T7013] loop1: detected capacity change from 0 to 32768 [ 237.166045][ T7013] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7013) [ 237.191248][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.203984][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.217803][ T6774] device veth1_vlan entered promiscuous mode [ 237.248010][ T7013] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.267352][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.271596][ T7013] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 237.283631][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.292168][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.295286][ T7013] BTRFS info (device loop1): setting nodatacow, compression disabled [ 237.314786][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.342326][ T6774] device veth0_macvtap entered promiscuous mode [ 237.345108][ T7013] BTRFS info (device loop1): doing ref verification [ 237.360484][ T7013] BTRFS info (device loop1): enabling auto defrag [ 237.375569][ T7013] BTRFS info (device loop1): max_inline at 0 [ 237.383302][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.388418][ T7013] BTRFS info (device loop1): using free space tree [ 237.398873][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.427631][ T6774] device veth1_macvtap entered promiscuous mode [ 237.442545][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.451803][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.481183][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.518415][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.543034][ T7013] BTRFS info (device loop1): enabling ssd optimizations [ 237.547872][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.562982][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.573130][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.589936][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.610465][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.642257][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.656748][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.677101][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.695433][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.705583][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.718554][ T27] audit: type=1804 audit(1717428054.664:231): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2697139290/syzkaller.WbV5Vw/16/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 237.751683][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.768961][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.787554][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.797744][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.839064][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.865338][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.893393][ T6724] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.898631][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.918518][ T27] audit: type=1804 audit(1717428054.854:232): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4293125488/syzkaller.IAhDvc/60/bus" dev="sda1" ino=1945 res=1 errno=0 [ 237.952857][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.973404][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.000573][ T6774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.072097][ T6774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.089201][ T6774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.121729][ T6774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.355674][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.387912][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.442767][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.457476][ T7071] loop3: detected capacity change from 0 to 1024 [ 238.470436][ T3974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.488952][ T3974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.498578][ T7071] EXT4-fs (loop3): can't mount with commit=4, fs mounted w/o journal [ 238.532760][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.612884][ T7074] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 238.944685][ T7074] loop1: detected capacity change from 0 to 4096 [ 238.951841][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.962305][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.008432][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.030092][ T7084] loop2: detected capacity change from 0 to 2048 [ 239.040908][ T7074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 239.052866][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.078035][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.092858][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.103250][ T6815] device veth0_vlan entered promiscuous mode [ 239.126147][ T7089] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 239.146441][ T6815] device veth1_vlan entered promiscuous mode [ 239.317095][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.328644][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 239.348364][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.382317][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.083130][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.101482][ T6815] device veth0_macvtap entered promiscuous mode [ 240.188623][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.208961][ T6815] device veth1_macvtap entered promiscuous mode [ 240.282285][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.315190][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.338302][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.374564][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.408441][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.409003][ T7104] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.438573][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.460000][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.507295][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.541533][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.567171][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.581001][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.612403][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.637781][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.668861][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.703163][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.733504][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.763369][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.793879][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.827285][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.852378][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.894227][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.920624][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.951773][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.976669][ T6815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.004321][ T6815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.022240][ T6815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.067546][ T6815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.136457][ T7102] loop2: detected capacity change from 0 to 32768 [ 241.243118][ T7099] loop3: detected capacity change from 0 to 32768 [ 241.265406][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.281127][ T7099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7099) [ 241.283296][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.341958][ T7099] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.374140][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.381708][ T7099] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 241.386472][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.419848][ T7099] BTRFS info (device loop3): setting nodatacow, compression disabled [ 241.429651][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.453624][ T7099] BTRFS info (device loop3): doing ref verification [ 241.469269][ T7120] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 241.485713][ T7099] BTRFS info (device loop3): enabling auto defrag [ 241.490142][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.510967][ T7099] BTRFS info (device loop3): max_inline at 0 [ 241.534410][ T7099] BTRFS info (device loop3): using free space tree [ 241.663545][ T27] audit: type=1804 audit(1717428058.594:233): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2958586246/syzkaller.KZiiEn/2/bus" dev="sda1" ino=1966 res=1 errno=0 [ 241.711549][ T7099] BTRFS info (device loop3): enabling ssd optimizations [ 241.775290][ T27] audit: type=1804 audit(1717428058.714:234): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3471407877/syzkaller.3TfQAy/66/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 241.950260][ T6354] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.576122][ T7155] loop1: detected capacity change from 0 to 4096 [ 242.623616][ T27] audit: type=1326 audit(1717428059.554:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 242.668708][ T7155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.727668][ T27] audit: type=1326 audit(1717428059.584:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 242.833015][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 242.837649][ T27] audit: type=1326 audit(1717428059.584:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 243.165295][ T7193] loop3: detected capacity change from 0 to 128 [ 243.182974][ T7126] loop4: detected capacity change from 0 to 32768 [ 243.222483][ T7193] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 243.267060][ T7193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.296752][ T27] audit: type=1800 audit(1717428060.234:238): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=125 res=0 errno=0 [ 243.434801][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.528791][ T7204] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 243.769770][ T7220] loop4: detected capacity change from 0 to 256 [ 243.792091][ T7226] loop1: detected capacity change from 0 to 1024 [ 243.808855][ T7226] hfsplus: invalid btree extent records (0 size) [ 243.818231][ T7222] loop3: detected capacity change from 0 to 256 [ 243.818590][ T7226] hfsplus: failed to load catalog file [ 243.842132][ T7220] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 243.877848][ T7222] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.023696][ T7235] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 244.065667][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.112477][ T7237] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 244.143659][ T7230] loop1: detected capacity change from 0 to 4096 [ 244.209076][ T7230] NILFS (loop1): invalid segment: Checksum error in segment payload [ 244.269012][ T7230] NILFS (loop1): trying rollback from an earlier position [ 244.357570][ T7230] NILFS (loop1): recovery complete [ 244.389557][ T7249] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.541229][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.608597][ T7257] loop2: detected capacity change from 0 to 256 [ 244.624012][ T7258] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 244.650842][ T7261] input: syz1 as /devices/virtual/input/input5 [ 244.659619][ T7264] loop4: detected capacity change from 0 to 16 [ 244.669005][ T7257] /dev/loop2: Can't open blockdev [ 244.706079][ T7264] erofs: (device loop4): mounted with root inode @ nid 36. [ 244.769433][ T7267] loop1: detected capacity change from 0 to 256 [ 244.800457][ T7267] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.996448][ T7280] loop3: detected capacity change from 0 to 2048 [ 245.039432][ T7280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.191184][ T7297] loop1: detected capacity change from 0 to 16 [ 245.212128][ T7295] loop4: detected capacity change from 0 to 256 [ 245.215444][ T7297] erofs: (device loop1): mounted with root inode @ nid 36. [ 245.253035][ T7295] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.394879][ T7304] loop3: detected capacity change from 0 to 256 [ 245.436527][ T7304] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.456826][ T7310] loop4: detected capacity change from 0 to 128 [ 245.501057][ T7310] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 245.548474][ T7310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.593044][ T27] audit: type=1800 audit(1717428062.524:239): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=125 res=0 errno=0 [ 245.840262][ T7328] loop4: detected capacity change from 0 to 16 [ 245.864145][ T7328] erofs: (device loop4): mounted with root inode @ nid 36. [ 246.057730][ T7337] trusted_key: encrypted_key: insufficient parameters specified [ 246.876325][ T27] audit: type=1800 audit(1717428063.804:240): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1934 res=0 errno=0 [ 247.043929][ T27] audit: type=1326 audit(1717428063.974:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.073095][ T27] audit: type=1326 audit(1717428063.974:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.107735][ T27] audit: type=1326 audit(1717428064.004:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.137818][ T27] audit: type=1326 audit(1717428064.004:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.166540][ T27] audit: type=1326 audit(1717428064.004:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.199902][ T27] audit: type=1326 audit(1717428064.004:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.249090][ T27] audit: type=1326 audit(1717428064.004:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95de7cee9 code=0x7ffc0000 [ 247.283621][ T3617] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 247.301865][ T27] audit: type=1326 audit(1717428064.004:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd95de7a667 code=0x7ffc0000 [ 247.332493][ T27] audit: type=1326 audit(1717428064.004:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd95de40329 code=0x7ffc0000 [ 247.385381][ T7356] loop2: detected capacity change from 0 to 1024 [ 247.406958][ T7356] EXT4-fs: Ignoring removed i_version option [ 247.423708][ T7356] EXT4-fs: Ignoring removed oldalloc option [ 247.438765][ T7356] /dev/loop2: Can't open blockdev [ 247.443944][ T7362] tipc: MTU too low for tipc bearer [ 247.553977][ T3617] usb 5-1: Using ep0 maxpacket: 16 [ 249.351111][ T7368] trusted_key: encrypted_key: insufficient parameters specified [ 249.385499][ T7369] trusted_key: encrypted_key: insufficient parameters specified [ 249.828806][ T3617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 249.868820][ T3617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 249.913915][ T3617] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 249.960913][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.020328][ T3617] usb 5-1: config 0 descriptor?? [ 250.064544][ T3617] usb 5-1: can't set config #0, error -71 [ 250.099905][ T3617] usb 5-1: USB disconnect, device number 5 [ 250.147486][ T7382] input: syz1 as /devices/virtual/input/input6 [ 250.371563][ T7395] tipc: MTU too low for tipc bearer [ 250.547137][ T7405] trusted_key: encrypted_key: insufficient parameters specified [ 252.499625][ T7408] trusted_key: encrypted_key: insufficient parameters specified [ 253.162095][ T7432] tipc: MTU too low for tipc bearer [ 253.355463][ T7442] trusted_key: encrypted_key: insufficient parameters specified [ 254.760253][ T7477] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.202965][ T7500] loop1: detected capacity change from 0 to 256 [ 255.249805][ T7500] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 255.373977][ T3294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.416346][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.422967][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.744148][ T3294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.982590][ T3294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.995629][ T3294] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.004803][ T3294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.015285][ T3294] usb 3-1: config 0 descriptor?? [ 256.270462][ T7552] loop1: detected capacity change from 0 to 256 [ 256.291053][ T7552] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 256.299116][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.473760][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.502951][ T3294] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 256.521032][ T3294] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 256.543212][ T3294] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 256.743671][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.797319][ T3294] usb 3-1: USB disconnect, device number 4 [ 257.025493][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.030776][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.156509][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.171803][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.275559][ T7598] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 257.340605][ T7603] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 257.402122][ T7613] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 257.427530][ T7611] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 257.493574][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.806598][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.885419][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.906099][ T7649] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 258.024037][ T3294] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 258.283971][ T7666] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 258.292332][ T7666] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 258.545171][ T3294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.716251][ T3294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.979712][ T3294] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.025319][ T3294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.067246][ T3294] usb 3-1: config 0 descriptor?? [ 259.229029][ T7681] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 259.575977][ T3294] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 259.594035][ T3294] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 259.607079][ T3294] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 259.846668][ T3294] usb 3-1: USB disconnect, device number 5 [ 260.105050][ T7708] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 260.325820][ T7712] loop3: detected capacity change from 0 to 512 [ 260.334102][ T7712] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.342646][ T7712] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.422952][ T7712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 260.444296][ T7712] __quota_error: 113 callbacks suppressed [ 260.444313][ T7712] Quota error (device loop3): write_blk: dquota write failed [ 260.458300][ T7712] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 260.486293][ T7712] Quota error (device loop3): write_blk: dquota write failed [ 260.494999][ T7712] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 260.514104][ T7712] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 1 [ 260.583501][ T7712] EXT4-fs (loop3): 1 truncate cleaned up [ 260.606841][ T7712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.705322][ T7721] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 260.760075][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 260.921797][ T7729] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 261.016298][ T7729] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 261.055101][ T7732] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 261.727438][ T7719] loop1: detected capacity change from 0 to 32768 [ 261.761524][ T7719] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 261.788572][ T7719] dlm: no local IP address has been set [ 261.807277][ T7719] dlm: cannot start dlm midcomms -107 [ 261.808550][ T7749] loop4: detected capacity change from 0 to 512 [ 261.821198][ T7719] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 261.832047][ T7749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.844550][ T7749] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.879586][ T7751] __nla_validate_parse: 5 callbacks suppressed [ 261.879601][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.897042][ T7751] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 261.908164][ T7749] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 261.932277][ T7749] Quota error (device loop4): write_blk: dquota write failed [ 261.940030][ T7749] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 261.960452][ T7749] Quota error (device loop4): write_blk: dquota write failed [ 261.968830][ T7749] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 261.979338][ T7749] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1 [ 261.993905][ T7749] EXT4-fs (loop4): 1 truncate cleaned up [ 262.004037][ T7749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.068762][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 263.182603][ T7798] loop3: detected capacity change from 0 to 512 [ 263.219181][ T7772] loop4: detected capacity change from 0 to 32768 [ 263.227950][ T7798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.265807][ T7798] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.284878][ T7772] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7772) [ 263.310254][ T7772] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 263.332874][ T7798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 263.354482][ T7772] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 263.368609][ T7798] Quota error (device loop3): write_blk: dquota write failed [ 263.377486][ T7772] BTRFS info (device loop4): force zlib compression, level 3 [ 263.395373][ T7798] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 263.409280][ T7772] BTRFS info (device loop4): force clearing of disk cache [ 263.420512][ T7798] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 1 [ 263.437188][ T7772] BTRFS info (device loop4): setting nodatasum [ 263.443552][ T7772] BTRFS info (device loop4): allowing degraded mounts [ 263.452825][ T7798] EXT4-fs (loop3): 1 truncate cleaned up [ 263.463332][ T7772] BTRFS info (device loop4): enabling disk space caching [ 263.472145][ T7798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.488844][ T7772] BTRFS info (device loop4): disk space caching is enabled [ 263.574315][ T3584] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 263.583165][ T3584] Bluetooth: hci0: Injecting HCI hardware error event [ 263.594910][ T3584] Bluetooth: hci0: hardware error 0x00 [ 263.610233][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 263.669742][ T7772] BTRFS info (device loop4): rebuilding free space tree [ 263.682608][ T7794] loop2: detected capacity change from 0 to 32768 [ 263.690519][ T7794] /dev/loop2: Can't open blockdev [ 263.714633][ T7772] BTRFS info (device loop4): disabling free space tree [ 263.721806][ T7772] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.731821][ T7772] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.872235][ T6815] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 264.385658][ T7848] loop4: detected capacity change from 0 to 512 [ 264.401734][ T7848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.411856][ T7848] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.430976][ T7848] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 264.460570][ T7848] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1 [ 264.488161][ T7848] EXT4-fs (loop4): 1 truncate cleaned up [ 264.501183][ T7848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 264.627629][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 264.741714][ T7859] loop2: detected capacity change from 0 to 2048 [ 265.170769][ T7880] loop1: detected capacity change from 0 to 2048 [ 265.217101][ T7880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.264909][ T7880] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 265.329850][ T7889] fuse: Bad value for 'fd' [ 265.655006][ T3584] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 265.953661][ T7915] loop4: detected capacity change from 0 to 2048 [ 266.013724][ T7915] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.042847][ T7915] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 266.115083][ T7903] loop1: detected capacity change from 0 to 32768 [ 266.188013][ T7903] XFS (loop1): Mounting V5 Filesystem [ 266.261875][ T7903] XFS (loop1): Ending clean mount [ 266.304037][ T6724] XFS (loop1): Unmounting Filesystem [ 266.588854][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 266.588871][ T27] audit: type=1326 audit(1717428083.524:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94b87cee9 code=0x0 [ 266.621967][ T3584] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 266.630764][ T3584] Bluetooth: hci3: Injecting HCI hardware error event [ 266.641029][ T3587] Bluetooth: hci3: hardware error 0x00 [ 266.888718][ T7949] loop1: detected capacity change from 0 to 128 [ 267.474521][ T7954] loop2: detected capacity change from 0 to 1024 [ 267.502092][ T7954] /dev/loop2: Can't open blockdev [ 268.760784][ T3587] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 269.337283][ T7966] loop4: detected capacity change from 0 to 512 [ 269.389872][ T7966] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.399945][ T7966] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 270.389104][ T7983] loop4: detected capacity change from 0 to 32768 [ 270.412244][ T7983] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7983) [ 270.443624][ T7983] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 270.466989][ T7983] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 270.485342][ T7983] BTRFS info (device loop4): force zlib compression, level 3 [ 270.529223][ T7983] BTRFS info (device loop4): force clearing of disk cache [ 270.545955][ T7983] BTRFS info (device loop4): setting nodatasum [ 270.556676][ T7994] loop3: detected capacity change from 0 to 128 [ 270.564324][ T7983] BTRFS info (device loop4): allowing degraded mounts [ 270.580141][ T7983] BTRFS info (device loop4): enabling disk space caching [ 270.595638][ T7983] BTRFS info (device loop4): disk space caching is enabled [ 270.667121][ T8001] loop1: detected capacity change from 0 to 128 [ 274.559836][ T7983] BTRFS error (device loop4): open_ctree failed [ 275.224045][ T3775] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 275.505355][ T3775] usb 5-1: Using ep0 maxpacket: 16 [ 275.625085][ T3775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.641464][ T3775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.651716][ T3775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.665182][ T3775] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 275.675716][ T3775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.692232][ T3775] usb 5-1: config 0 descriptor?? [ 275.927197][ T8055] loop2: detected capacity change from 0 to 128 [ 276.215900][ T3775] koneplus 0003:1E7D:2E22.000F: unknown main item tag 0x0 [ 276.237520][ T3775] koneplus 0003:1E7D:2E22.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 276.243467][ T8075] loop3: detected capacity change from 0 to 512 [ 276.353267][ T8075] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.583359][ T8075] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 276.984207][ T3775] koneplus 0003:1E7D:2E22.000F: couldn't init struct koneplus_device [ 276.992379][ T3775] koneplus 0003:1E7D:2E22.000F: couldn't install mouse [ 277.008454][ T3775] koneplus: probe of 0003:1E7D:2E22.000F failed with error -71 [ 277.022265][ T3775] usb 5-1: USB disconnect, device number 6 [ 277.251563][ T8091] loop3: detected capacity change from 0 to 128 [ 277.313605][ T8091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.331612][ T8091] ext4 filesystem being mounted at /root/syzkaller-testdir3471407877/syzkaller.3TfQAy/154/mnt supports timestamps until 2038 (0x7fffffff) [ 277.401270][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 277.641619][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.238771][ T8129] loop4: detected capacity change from 0 to 128 [ 279.236908][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.713502][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.749750][ T3775] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 280.023995][ T3777] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 280.134175][ T3775] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 280.143291][ T3775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.165536][ T3775] usb 5-1: config 0 descriptor?? [ 280.284023][ T3777] usb 3-1: Using ep0 maxpacket: 32 [ 280.390810][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.414425][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.426988][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.444068][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 280.474281][ T3775] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 280.482864][ T3775] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 280.495405][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.506772][ T3777] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 280.521309][ T3777] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 280.530812][ T3775] [drm:udl_init] *ERROR* Selecting channel failed [ 280.537588][ T3777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.575203][ T3777] usb 3-1: config 0 descriptor?? [ 280.583174][ T3775] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 280.605713][ T3775] [drm] Initialized udl on minor 2 [ 280.632591][ T8213] loop1: detected capacity change from 0 to 128 [ 280.644137][ T3775] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 280.662105][ T3775] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 280.680377][ T3775] usb 5-1: USB disconnect, device number 7 [ 282.014199][ T3777] ntrig 0003:1B96:000A.0010: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 282.667822][ T3777] usb 3-1: USB disconnect, device number 6 [ 282.859024][ T8247] loop4: detected capacity change from 0 to 128 [ 285.179567][ T8295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.308628][ T8308] loop4: detected capacity change from 0 to 1024 [ 285.349895][ T3978] hfsplus: b-tree write err: -5, ino 4 [ 286.396570][ T8330] loop4: detected capacity change from 0 to 512 [ 286.506747][ T8330] EXT4-fs (loop4): 1 orphan inode deleted [ 286.540822][ T8330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 286.550096][ T8330] ext4 filesystem being mounted at /root/syzkaller-testdir825842552/syzkaller.SakR5W/97/file1 supports timestamps until 2038 (0x7fffffff) [ 286.648580][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 286.783923][ T3853] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 286.804116][ T3775] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 286.927226][ T8364] loop2: detected capacity change from 0 to 128 [ 287.005026][ T8368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.073932][ T3775] usb 2-1: Using ep0 maxpacket: 16 [ 287.087416][ T8370] loop4: detected capacity change from 0 to 4096 [ 287.103185][ T8370] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 287.163022][ T3853] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 287.183893][ T3853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.188238][ T8376] netlink: set zone limit has 4 unknown bytes [ 287.201738][ T3775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.209306][ T3853] usb 4-1: config 0 descriptor?? [ 287.223623][ T3775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.273527][ T3775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.293378][ T3775] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.323940][ T3775] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.434426][ T3775] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.457125][ T8386] loop2: detected capacity change from 0 to 128 [ 287.458312][ T3775] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 287.471703][ T8386] /dev/loop2: Can't open blockdev [ 287.484104][ T3775] usb 2-1: Manufacturer: syz [ 287.490356][ T3775] usb 2-1: config 0 descriptor?? [ 287.524284][ T3853] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 287.532844][ T3853] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 287.564070][ T3853] [drm:udl_init] *ERROR* Selecting channel failed [ 287.585764][ T3853] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 287.605645][ T3853] [drm] Initialized udl on minor 2 [ 287.633937][ T3853] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 287.646147][ T3853] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 287.669874][ T3853] usb 4-1: USB disconnect, device number 5 [ 287.742769][ T8398] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.871431][ T27] audit: type=1326 audit(1717428104.804:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 287.904750][ T3775] rc_core: IR keymap rc-hauppauge not found [ 287.911192][ T3775] Registered IR keymap rc-empty [ 287.921212][ T27] audit: type=1326 audit(1717428104.804:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 287.921987][ T8407] netlink: set zone limit has 4 unknown bytes [ 287.944899][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 287.969375][ T27] audit: type=1326 audit(1717428104.814:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 287.997295][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.035304][ T3775] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 288.060754][ T27] audit: type=1326 audit(1717428104.814:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 288.093159][ T3775] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 288.121971][ T27] audit: type=1326 audit(1717428104.814:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 288.173550][ T8418] loop2: detected capacity change from 0 to 128 [ 288.184141][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.214115][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.235147][ T8418] /dev/loop2: Can't open blockdev [ 288.241071][ T27] audit: type=1326 audit(1717428104.814:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 288.258408][ T8423] loop4: detected capacity change from 0 to 128 [ 288.265051][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.298643][ T27] audit: type=1326 audit(1717428104.854:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 288.332300][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.352477][ T27] audit: type=1326 audit(1717428104.884:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f0247a667 code=0x7ffc0000 [ 288.384552][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.414097][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.436986][ T27] audit: type=1326 audit(1717428104.884:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f02440329 code=0x7ffc0000 [ 288.463884][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.485819][ T27] audit: type=1326 audit(1717428104.884:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6f0247cee9 code=0x7ffc0000 [ 288.513964][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.546610][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.584954][ T3775] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.619319][ T3775] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 288.642895][ T8435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.651591][ T3775] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 288.702178][ T3853] usb 2-1: USB disconnect, device number 3 [ 288.755489][ T8439] netlink: set zone limit has 4 unknown bytes [ 288.917357][ T3294] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 288.955152][ T8445] loop4: detected capacity change from 0 to 4096 [ 289.092217][ T8445] loop4: detected capacity change from 0 to 512 [ 289.148051][ T8445] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 289.168321][ T8445] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #16: comm syz-executor.4: mark_inode_dirty error [ 289.181289][ T8445] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 289.195579][ T8445] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz-executor.4: mark_inode_dirty error [ 289.208027][ T8445] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 289.231551][ T8445] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 289.247521][ T8445] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 289.282368][ T8445] EXT4-fs error (device loop4): ext4_truncate:4300: inode #16: comm syz-executor.4: mark_inode_dirty error [ 289.294788][ T3294] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 289.315364][ T8445] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 289.316566][ T3294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.337752][ T8445] EXT4-fs (loop4): 1 truncate cleaned up [ 289.343505][ T8445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 289.352662][ T8445] ext4 filesystem being mounted at /root/syzkaller-testdir825842552/syzkaller.SakR5W/110/file1 supports timestamps until 2038 (0x7fffffff) [ 289.369276][ T3294] usb 4-1: config 0 descriptor?? [ 289.380404][ T8457] loop1: detected capacity change from 0 to 512 [ 289.395204][ T3974] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 1 [ 289.427200][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 289.468681][ T8457] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 289.493533][ T8457] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #16: comm syz-executor.1: mark_inode_dirty error [ 289.518946][ T8457] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 289.522120][ T8462] loop4: detected capacity change from 0 to 128 [ 289.543330][ T8457] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz-executor.1: mark_inode_dirty error [ 289.592947][ T8457] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 289.635698][ T8457] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz-executor.1: mark_inode_dirty error [ 289.661975][ T8457] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 289.674070][ T3294] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 289.683079][ T3294] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 289.704029][ T8457] EXT4-fs error (device loop1): ext4_truncate:4300: inode #16: comm syz-executor.1: mark_inode_dirty error [ 289.724764][ T3294] [drm:udl_init] *ERROR* Selecting channel failed [ 289.729704][ T8457] EXT4-fs error (device loop1): ext4_evict_inode:290: comm syz-executor.1: couldn't truncate inode 16 (err -117) [ 289.750995][ T3294] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 289.757136][ T8457] EXT4-fs (loop1): 1 orphan inode deleted [ 289.777769][ T3294] [drm] Initialized udl on minor 2 [ 289.796729][ T8457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.804640][ T3294] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 289.820318][ T3294] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 289.824462][ T8457] ext4 filesystem being mounted at /root/syzkaller-testdir2697139290/syzkaller.WbV5Vw/120/file1 supports timestamps until 2038 (0x7fffffff) [ 289.838899][ T3294] usb 4-1: USB disconnect, device number 6 [ 289.891979][ T8478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.192153][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 290.195099][ T8484] loop2: detected capacity change from 0 to 4096 [ 290.402543][ T8486] loop4: detected capacity change from 0 to 4096 [ 290.405477][ T8490] loop1: detected capacity change from 0 to 4096 [ 290.483941][ T8494] loop2: detected capacity change from 0 to 128 [ 290.543095][ T8490] loop1: detected capacity change from 0 to 512 [ 290.588021][ T8486] loop4: detected capacity change from 0 to 512 [ 290.642605][ T8486] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 290.664477][ T8486] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #16: comm syz-executor.4: mark_inode_dirty error [ 290.705805][ T8490] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 290.714277][ T8486] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 290.737702][ T8490] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #16: comm syz-executor.1: mark_inode_dirty error [ 290.758402][ T8490] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 290.771264][ T8490] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz-executor.1: mark_inode_dirty error [ 290.793420][ T8486] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz-executor.4: mark_inode_dirty error [ 290.818592][ T8486] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 290.823457][ T8490] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 290.845355][ T8486] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 290.875212][ T8486] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 290.889748][ T8490] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 290.898790][ T8486] EXT4-fs error (device loop4): ext4_truncate:4300: inode #16: comm syz-executor.4: mark_inode_dirty error [ 290.916217][ T8490] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz-executor.1: corrupted inode contents [ 290.916434][ T8486] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 290.960738][ T8486] EXT4-fs (loop4): 1 truncate cleaned up [ 290.963197][ T8490] EXT4-fs error (device loop1): ext4_truncate:4300: inode #16: comm syz-executor.1: mark_inode_dirty error [ 290.970226][ T8486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 290.984248][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1 [ 291.001214][ T8486] ext4 filesystem being mounted at /root/syzkaller-testdir825842552/syzkaller.SakR5W/114/file1 supports timestamps until 2038 (0x7fffffff) [ 291.033992][ T8490] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 291.059582][ T8490] EXT4-fs (loop1): 1 truncate cleaned up [ 291.074339][ T4040] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:14: Failed to release dquot type 1 [ 291.085996][ T8490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.099940][ T8490] ext4 filesystem being mounted at /root/syzkaller-testdir2697139290/syzkaller.WbV5Vw/121/file1 supports timestamps until 2038 (0x7fffffff) [ 291.129785][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 291.220471][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 293.193259][ T8561] loop1: detected capacity change from 0 to 512 [ 293.271378][ T8561] EXT4-fs (loop1): 1 orphan inode deleted [ 293.288113][ T8561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.303956][ T8561] ext4 filesystem being mounted at /root/syzkaller-testdir2697139290/syzkaller.WbV5Vw/129/file1 supports timestamps until 2038 (0x7fffffff) [ 293.409455][ T8533] loop2: detected capacity change from 0 to 40427 [ 293.430329][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 295.342587][ T8623] loop4: detected capacity change from 0 to 512 [ 295.389958][ T3775] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 295.415893][ T8623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.425213][ T8623] ext4 filesystem being mounted at /root/syzkaller-testdir825842552/syzkaller.SakR5W/123/file0 supports timestamps until 2038 (0x7fffffff) [ 296.749206][ T8623] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 296.797312][ T8623] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor.4: mark_inode_dirty error [ 296.818486][ T8623] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 296.837923][ T8623] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 297.010502][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 297.224130][ T3775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.235400][ T3775] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 297.344132][ T3775] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.356617][ T3775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.371719][ T3775] usb 2-1: SerialNumber: syz [ 297.414898][ T3775] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 297.588842][ T8638] loop3: detected capacity change from 0 to 32768 [ 297.632968][ T8638] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8638) [ 297.677379][ T8638] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.707401][ T8638] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 297.714776][ T8672] loop4: detected capacity change from 0 to 512 [ 297.728771][ T8604] loop1: detected capacity change from 0 to 1764 [ 297.746284][ T8638] BTRFS info (device loop3): turning on flush-on-commit [ 297.754532][ T8638] BTRFS info (device loop3): turning off barriers [ 297.762493][ T8638] BTRFS info (device loop3): doing ref verification [ 297.776323][ T8638] BTRFS info (device loop3): force clearing of disk cache [ 297.784445][ T8638] BTRFS info (device loop3): enabling disk space caching [ 297.787671][ T8672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 297.792210][ T8638] BTRFS info (device loop3): turning on sync discard [ 297.808002][ T8672] ext4 filesystem being mounted at /root/syzkaller-testdir825842552/syzkaller.SakR5W/128/file0 supports timestamps until 2038 (0x7fffffff) [ 297.850045][ T8638] BTRFS info (device loop3): using default commit interval 30s [ 297.867011][ T8638] BTRFS info (device loop3): disk space caching is enabled [ 297.882595][ T8672] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 297.909842][ T8672] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor.4: mark_inode_dirty error [ 297.938465][ T8672] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 297.956985][ T3294] usb 2-1: USB disconnect, device number 4 [ 297.987826][ T8672] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 298.065598][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 298.071952][ T8638] BTRFS info (device loop3): enabling ssd optimizations [ 298.084330][ T8638] BTRFS info (device loop3): rebuilding free space tree [ 298.144614][ T8638] BTRFS info (device loop3): disabling free space tree [ 298.151525][ T8638] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.183495][ T8638] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 298.270680][ T6354] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.640257][ T8718] loop4: detected capacity change from 0 to 4096 [ 298.679882][ T8718] __ntfs_error: 64 callbacks suppressed [ 298.679897][ T8718] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 298.758674][ T8718] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 298.833733][ T8718] ntfs: (device loop4): map_mft_record_page(): Mft record 0x6 is corrupt. Run chkdsk. [ 298.848199][ T8735] loop1: detected capacity change from 0 to 512 [ 298.858153][ T8718] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 298.872278][ T8718] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x6 as bad. Run chkdsk. [ 298.900247][ T8718] ntfs: (device loop4): load_system_files(): Failed to load $Bitmap. [ 298.915901][ T8735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.958967][ T8735] ext4 filesystem being mounted at /root/syzkaller-testdir2697139290/syzkaller.WbV5Vw/136/file0 supports timestamps until 2038 (0x7fffffff) [ 298.975467][ T8718] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 299.108882][ T8735] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 299.131842][ T8718] loop4: detected capacity change from 0 to 512 [ 299.192777][ T8735] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz-executor.1: mark_inode_dirty error [ 299.217345][ T8735] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 299.245156][ T8718] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 299.287592][ T8718] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #16: comm syz-executor.4: mark_inode_dirty error [ 299.321256][ T8735] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 299.351762][ T8718] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 299.398142][ T8718] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz-executor.4: mark_inode_dirty error [ 299.472781][ T8718] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 299.497180][ T8718] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 299.513220][ T8718] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 299.536013][ T8718] EXT4-fs error (device loop4): ext4_truncate:4300: inode #16: comm syz-executor.4: mark_inode_dirty error [ 299.551932][ T8718] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 299.566276][ T8718] EXT4-fs (loop4): 1 truncate cleaned up [ 299.566386][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 299.572072][ T8718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.594742][ T8718] ext4 filesystem being mounted at /root/syzkaller-testdir825842552/syzkaller.SakR5W/130/file1 supports timestamps until 2038 (0x7fffffff) [ 299.636915][ T3974] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.661910][ T3974] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 1 [ 299.709724][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 300.127815][ T27] audit: type=1326 audit(1717428117.064:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa94b87cee9 code=0x0 [ 300.504092][ T7065] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 300.866401][ T7065] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 300.877455][ T7065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.903136][ T7065] usb 2-1: config 0 descriptor?? [ 300.946434][ T7065] usb 2-1: selecting invalid altsetting 1 [ 301.049509][ T7065] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 301.150816][ T3853] usb 2-1: USB disconnect, device number 5 [ 301.582774][ T8861] loop3: detected capacity change from 0 to 64 [ 301.724609][ T27] audit: type=1326 audit(1717428118.664:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf8367cee9 code=0x0 [ 302.054686][ T3853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 302.306174][ T3853] usb 2-1: Using ep0 maxpacket: 16 [ 303.054307][ T3853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.065351][ T3853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.076434][ T3853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.086296][ T3853] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 303.101105][ T3853] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.187838][ T8880] loop3: detected capacity change from 0 to 40427 [ 303.202463][ T8880] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 303.214075][ T3853] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.226995][ T3853] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.235188][ T8880] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 303.250096][ T3853] usb 2-1: Manufacturer: syz [ 303.265522][ T3853] usb 2-1: config 0 descriptor?? [ 303.270608][ T8880] F2FS-fs (loop3): invalid crc value [ 303.301863][ T8880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.413277][ T8880] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 303.426699][ T8880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 303.481396][ T8880] syz-executor.3: attempt to access beyond end of device [ 303.481396][ T8880] loop3: rw=2051, sector=98304, nr_sectors = 32768 limit=40427 [ 303.509030][ T8880] F2FS-fs (loop3): Issue discard(12288, 12288, 4096) failed, ret: -5 [ 303.703942][ T3853] rc_core: IR keymap rc-hauppauge not found [ 303.728591][ T3853] Registered IR keymap rc-empty [ 303.744970][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.784045][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.814501][ T3853] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 303.858141][ T3853] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 303.892711][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.934011][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.974187][ T3587] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 303.981208][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.982853][ T3587] Bluetooth: hci4: Injecting HCI hardware error event [ 303.999783][ T3584] Bluetooth: hci4: hardware error 0x00 [ 304.074042][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.103927][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.134039][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.148987][ T8924] loop3: detected capacity change from 0 to 1024 [ 304.174842][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.194632][ T8924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.204375][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.248524][ T8930] loop4: detected capacity change from 0 to 1024 [ 304.250500][ T8924] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 304.284021][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.295291][ T8930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.314569][ T3853] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 304.332318][ T8930] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 304.345538][ T8935] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 304.355415][ T3853] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 304.363432][ T3853] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 304.366917][ T8938] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 304.387449][ T3587] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 304.393627][ T8939] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 304.396223][ T3587] Bluetooth: hci1: Injecting HCI hardware error event [ 304.398158][ T3583] Bluetooth: hci1: hardware error 0x00 [ 304.437762][ T3853] usb 2-1: USB disconnect, device number 6 [ 304.476305][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 304.538818][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 305.041725][ T8967] loop3: detected capacity change from 0 to 1024 [ 305.105574][ T8967] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 305.126003][ T8967] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 305.136402][ T8967] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 305.205517][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 305.371599][ T8981] netlink: 4096 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.690209][ T8998] loop2: detected capacity change from 0 to 1024 [ 305.706456][ T9004] netlink: 4096 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.731126][ T9003] loop4: detected capacity change from 0 to 2048 [ 305.732065][ T8998] /dev/loop2: Can't open blockdev [ 305.790030][ T9009] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.931037][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 305.931052][ T27] audit: type=1326 audit(1717428122.864:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0247cee9 code=0x0 [ 306.141673][ T3584] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 307.771138][ T3583] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 308.261113][ T9050] netlink: 4096 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.312292][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.360755][ T9053] loop4: detected capacity change from 0 to 1024 [ 308.369738][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.432807][ T9053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.463632][ T9053] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 308.484733][ T9053] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 308.499510][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.603194][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.675237][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 309.719750][ T9085] loop3: detected capacity change from 0 to 512 [ 309.731032][ T9085] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 309.746766][ T9085] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 309.760929][ T9085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 309.817946][ T9092] loop2: detected capacity change from 0 to 512 [ 309.826512][ T9092] /dev/loop2: Can't open blockdev [ 309.904282][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 310.118001][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.355216][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.500412][ T9117] loop4: detected capacity change from 0 to 512 [ 311.328331][ T9117] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 311.402484][ T9117] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 311.481254][ T9128] loop3: detected capacity change from 0 to 512 [ 311.484570][ T9117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 311.505941][ T9129] loop1: detected capacity change from 0 to 512 [ 311.549265][ T9129] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.1: inline data xattr refers to an external xattr inode [ 311.582015][ T9128] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 311.587910][ T9129] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 311.620425][ T6815] EXT4-fs (loop4): unmounting filesystem. [ 311.621845][ T9129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.641527][ T9128] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 311.659698][ T9128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.710033][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 311.780112][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 312.085887][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.111096][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.364254][ T935] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 314.432915][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.511315][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.728793][ T9168] loop3: detected capacity change from 0 to 512 [ 314.778194][ T9168] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 314.795853][ T9168] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 314.809322][ T9168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 314.824633][ T935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 314.858101][ T935] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 314.872770][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 314.961546][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.976285][ T935] usb 2-1: config 0 descriptor?? [ 315.008222][ T935] usb 2-1: can't set config #0, error -71 [ 315.016230][ T935] usb 2-1: USB disconnect, device number 7 [ 315.020118][ T9174] loop3: detected capacity change from 0 to 512 [ 315.072856][ T9174] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 315.128709][ T9174] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 315.155629][ T9185] loop1: detected capacity change from 0 to 24 [ 315.162946][ T9185] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 315.171253][ T9185] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 315.188364][ T9185] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 315.191498][ T9174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 315.326959][ T3294] libceph: connect (1)[c::]:6789 error -101 [ 315.334157][ T3294] libceph: mon0 (1)[c::]:6789 connect error [ 315.436540][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.460263][ T6354] EXT4-fs (loop3): unmounting filesystem. [ 315.460984][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.552574][ T9199] trusted_key: encrypted_key: keylen parameter is missing [ 315.607173][ T3853] libceph: connect (1)[c::]:6789 error -101 [ 315.613169][ T3853] libceph: mon0 (1)[c::]:6789 connect error [ 316.190901][ T9187] ceph: No mds server is up or the cluster is laggy [ 316.664419][ T7065] libceph: connect (1)[c::]:6789 error -101 [ 316.670462][ T7065] libceph: mon0 (1)[c::]:6789 connect error [ 316.856347][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.862817][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.424017][ T7065] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 317.794704][ T7065] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 317.858645][ T7065] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 317.903955][ T7065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.919566][ T9202] loop3: detected capacity change from 0 to 32768 [ 317.927232][ T7065] usb 5-1: config 0 descriptor?? [ 317.948514][ T9202] XFS (loop3): Mounting V5 Filesystem [ 317.976174][ T7065] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 317.999881][ T9202] XFS (loop3): Ending clean mount [ 318.070426][ T27] audit: type=1804 audit(1717428135.004:419): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3471407877/syzkaller.3TfQAy/258/file0/bus" dev="loop3" ino=4425 res=1 errno=0 [ 318.153709][ T6354] XFS (loop3): Unmounting Filesystem [ 318.617239][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.802067][ T9245] Bluetooth: MGMT ver 1.22 [ 319.289844][ T9237] loop1: detected capacity change from 0 to 32768 [ 319.310354][ T9237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (9237) [ 319.341445][ T9237] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.363113][ T9237] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 319.386129][ T9237] BTRFS info (device loop1): using free space tree [ 319.460864][ T8714] libceph: connect (1)[c::]:6789 error -101 [ 319.469279][ T8714] libceph: mon0 (1)[c::]:6789 connect error [ 319.545513][ T9237] BTRFS info (device loop1): enabling ssd optimizations [ 319.634749][ T6724] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.717832][ T9251] loop3: detected capacity change from 0 to 40427 [ 319.754532][ T8714] libceph: connect (1)[c::]:6789 error -101 [ 319.760560][ T8714] libceph: mon0 (1)[c::]:6789 connect error [ 319.806322][ T9251] F2FS-fs (loop3): Found nat_bits in checkpoint [ 319.906566][ T8714] usb 5-1: USB disconnect, device number 8 [ 320.027639][ T9284] loop1: detected capacity change from 0 to 1024 [ 320.038402][ T9251] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 320.044212][ T9284] EXT4-fs: Ignoring removed orlov option [ 320.073118][ T9284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.171007][ T9284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.267190][ T9260] ceph: No mds server is up or the cluster is laggy [ 320.284489][ T9284] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 320.303587][ T8714] libceph: connect (1)[c::]:6789 error -101 [ 320.309787][ T8714] libceph: mon0 (1)[c::]:6789 connect error [ 320.374917][ T9284] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 320.556886][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 320.662261][ T9297] loop1: detected capacity change from 0 to 256 [ 320.719433][ T9297] FAT-fs (loop1): bogus number of directory entries (4) [ 320.732354][ T9297] FAT-fs (loop1): Can't find a valid FAT filesystem [ 320.787674][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.889919][ T9287] loop4: detected capacity change from 0 to 32768 [ 320.953567][ T9287] XFS (loop4): Mounting V5 Filesystem [ 321.017633][ T9287] XFS (loop4): Ending clean mount [ 321.076779][ T9314] loop3: detected capacity change from 0 to 24 [ 321.096512][ T27] audit: type=1804 audit(1717428138.034:420): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir825842552/syzkaller.SakR5W/173/file0/bus" dev="loop4" ino=4425 res=1 errno=0 [ 321.104783][ T9314] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 321.151367][ T9314] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 321.177497][ T9314] VFS: Lookup of 'file0' in romfs loop3 would have caused loop [ 321.203353][ T6815] XFS (loop4): Unmounting Filesystem [ 321.894208][ T3849] libceph: connect (1)[c::]:6789 error -101 [ 321.901550][ T3849] libceph: mon0 (1)[c::]:6789 connect error [ 322.079124][ T27] audit: type=1804 audit(1717428139.014:421): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4293125488/syzkaller.IAhDvc/249/bus" dev="sda1" ino=1967 res=1 errno=0 [ 322.175310][ T14] libceph: connect (1)[c::]:6789 error -101 [ 322.196195][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 322.425145][ T27] audit: type=1800 audit(1717428139.364:422): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 322.714043][ T9327] ceph: No mds server is up or the cluster is laggy [ 322.753271][ T14] libceph: connect (1)[c::]:6789 error -101 [ 322.764038][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 322.798562][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.377543][ T9309] loop1: detected capacity change from 0 to 65536 [ 323.453344][ T9309] XFS (loop1): Mounting V5 Filesystem [ 323.530574][ T9309] XFS (loop1): Ending clean mount [ 323.564948][ T9309] XFS (loop1): Quotacheck needed: Please wait. [ 323.648893][ T9309] XFS (loop1): Quotacheck: Done. [ 323.804680][ T6724] XFS (loop1): Unmounting Filesystem [ 324.358372][ T8714] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 324.609296][ T8714] usb 5-1: Using ep0 maxpacket: 32 [ 324.610157][ T9368] loop3: detected capacity change from 0 to 32768 [ 324.660857][ T9368] [ 324.660857][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.660857][ T9368] [ 324.741021][ T8714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 324.765972][ T9368] [ 324.765972][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.765972][ T9368] [ 324.767975][ T8714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 324.806123][ T9381] [ 324.806123][ T9381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.806123][ T9381] [ 324.816563][ T8714] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.834692][ T8714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.848345][ T9368] [ 324.848345][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.848345][ T9368] [ 324.853390][ T8714] usb 5-1: config 0 descriptor?? [ 324.877630][ T935] libceph: connect (1)[c::]:6789 error -101 [ 324.881130][ T9381] [ 324.881130][ T9381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.881130][ T9381] [ 324.883639][ T935] libceph: mon0 (1)[c::]:6789 connect error [ 324.894198][ T9381] jfs: Unrecognized mount option "18446744073709551615˙000000000000000000000000x00000000000000000xffffffffffffffff˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff" or missing value [ 324.929078][ T9374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 324.934144][ T9368] [ 324.934144][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.934144][ T9368] [ 324.956586][ T8714] hub 5-1:0.0: USB hub found [ 324.975800][ T9368] [ 324.975800][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.975800][ T9368] [ 324.998094][ T9368] [ 324.998094][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.998094][ T9368] [ 325.025665][ T9368] [ 325.025665][ T9368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.025665][ T9368] [ 325.080827][ T133] [ 325.080827][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.080827][ T133] [ 325.109327][ T6354] [ 325.109327][ T6354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.109327][ T6354] [ 325.127120][ T6354] [ 325.127120][ T6354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 325.127120][ T6354] [ 325.234258][ T8714] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 325.252248][ T8715] libceph: connect (1)[c::]:6789 error -101 [ 325.260961][ T8715] libceph: mon0 (1)[c::]:6789 connect error [ 325.354007][ T8714] usbhid 5-1:0.0: can't add hid device: -71 [ 325.373974][ T8714] usbhid: probe of 5-1:0.0 failed with error -71 [ 325.424776][ T8714] usb 5-1: USB disconnect, device number 9 [ 325.656554][ T9383] ceph: No mds server is up or the cluster is laggy [ 326.814048][ T8714] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 326.949781][ T9431] loop1: detected capacity change from 0 to 32768 [ 326.984431][ T9431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (9431) [ 327.005267][ T9431] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.028400][ T9431] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 327.048927][ T9431] BTRFS info (device loop1): using free space tree [ 327.106188][ T8714] usb 5-1: Using ep0 maxpacket: 32 [ 327.118378][ T9431] BTRFS info (device loop1): enabling ssd optimizations [ 327.177158][ T6724] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.243947][ T8714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 327.263504][ T8714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 327.288806][ T8714] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 327.323865][ T8714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.344696][ T8714] usb 5-1: config 0 descriptor?? [ 327.376961][ T9442] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 327.404778][ T8714] hub 5-1:0.0: USB hub found [ 327.590920][ T9444] loop3: detected capacity change from 0 to 32768 [ 327.676833][ T9444] XFS (loop3): Mounting V5 Filesystem [ 327.684395][ T8714] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 327.740779][ T9444] XFS (loop3): Ending clean mount [ 327.787745][ T27] audit: type=1804 audit(1717428144.724:423): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2697139290/syzkaller.WbV5Vw/180/control" dev="sda1" ino=1967 res=1 errno=0 [ 327.815094][ T8714] usbhid 5-1:0.0: can't add hid device: -71 [ 327.821450][ T8714] usbhid: probe of 5-1:0.0 failed with error -71 [ 327.857502][ T27] audit: type=1804 audit(1717428144.754:424): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3471407877/syzkaller.3TfQAy/278/file0/bus" dev="loop3" ino=4425 res=1 errno=0 [ 327.890611][ T8714] usb 5-1: USB disconnect, device number 10 [ 327.920234][ T6354] XFS (loop3): Unmounting Filesystem [ 328.217660][ T9498] loop1: detected capacity change from 0 to 2048 [ 328.277500][ T9498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 328.407348][ T6724] EXT4-fs (loop1): unmounting filesystem. [ 328.637566][ T9511] loop1: detected capacity change from 0 to 1024 [ 328.657310][ T9511] EXT4-fs: Ignoring removed orlov option [ 328.673531][ T9511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.727222][ T9511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 328.850936][ T9517] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 328.965414][ T9517] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 329.284930][ T6724] ================================================================== [ 329.293051][ T6724] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 329.301065][ T6724] Read of size 4 at addr ffff88804d5b0000 by task syz-executor.1/6724 [ 329.309223][ T6724] [ 329.311564][ T6724] CPU: 0 PID: 6724 Comm: syz-executor.1 Not tainted 6.1.92-syzkaller #0 [ 329.319901][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 329.329969][ T6724] Call Trace: [ 329.333255][ T6724] [ 329.336199][ T6724] dump_stack_lvl+0x1e3/0x2cb [ 329.340912][ T6724] ? nf_tcp_handle_invalid+0x642/0x642 [ 329.346396][ T6724] ? panic+0x764/0x764 [ 329.350489][ T6724] ? _printk+0xd1/0x111 [ 329.354675][ T6724] ? __virt_addr_valid+0x17f/0x520 [ 329.359810][ T6724] ? __virt_addr_valid+0x17f/0x520 [ 329.364946][ T6724] print_report+0x15f/0x4f0 [ 329.369487][ T6724] ? __virt_addr_valid+0x17f/0x520 [ 329.374628][ T6724] ? __virt_addr_valid+0x17f/0x520 [ 329.379766][ T6724] ? __virt_addr_valid+0x44a/0x520 [ 329.384904][ T6724] ? __phys_addr+0xb6/0x170 [ 329.389434][ T6724] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 329.395094][ T6724] kasan_report+0x136/0x160 [ 329.399609][ T6724] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 329.405334][ T6724] ext4_xattr_delete_inode+0xcd0/0xce0 [ 329.410800][ T6724] ? ext4_blocks_for_truncate+0x270/0x270 [ 329.416612][ T6724] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 329.422687][ T6724] ? rcu_read_lock_any_held+0xb3/0x160 [ 329.428153][ T6724] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 329.434058][ T6724] ext4_evict_inode+0xc77/0x1150 [ 329.439007][ T6724] ? _raw_spin_unlock+0x24/0x40 [ 329.443868][ T6724] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 329.449800][ T6724] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 329.455700][ T6724] evict+0x2a4/0x620 [ 329.459607][ T6724] vfs_rmdir+0x381/0x4b0 [ 329.464397][ T6724] do_rmdir+0x3a2/0x590 [ 329.468557][ T6724] ? d_delete_notify+0x150/0x150 [ 329.473500][ T6724] ? syscall_enter_from_user_mode+0x2e/0x230 [ 329.479478][ T6724] __x64_sys_unlinkat+0xdc/0xf0 [ 329.484332][ T6724] do_syscall_64+0x3b/0xb0 [ 329.488753][ T6724] ? clear_bhb_loop+0x45/0xa0 [ 329.493446][ T6724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.499337][ T6724] RIP: 0033:0x7fd70e07c6c7 [ 329.503753][ T6724] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 329.523358][ T6724] RSP: 002b:00007fff6d560848 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 329.531775][ T6724] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fd70e07c6c7 [ 329.539742][ T6724] RDX: 0000000000000200 RSI: 00007fff6d5619f0 RDI: 00000000ffffff9c [ 329.547704][ T6724] RBP: 00007fd70e0c8336 R08: 0000000000000000 R09: 0000000000000000 [ 329.555664][ T6724] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff6d5619f0 [ 329.563644][ T6724] R13: 00007fd70e0c8336 R14: 0000000000050376 R15: 0000000000000009 [ 329.571616][ T6724] [ 329.574628][ T6724] [ 329.576942][ T6724] The buggy address belongs to the physical page: [ 329.583365][ T6724] page:ffffea0001356c00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4d5b0 [ 329.593506][ T6724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 329.600614][ T6724] raw: 00fff00000000000 ffffea0001356c48 ffffea00014d31c8 0000000000000000 [ 329.609186][ T6724] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 329.617753][ T6724] page dumped because: kasan: bad access detected [ 329.624162][ T6724] page_owner tracks the page as freed [ 329.629520][ T6724] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 9444, tgid 9443 (syz-executor.3), ts 327095789133, free_ts 328152573335 [ 329.647571][ T6724] post_alloc_hook+0x18d/0x1b0 [ 329.652327][ T6724] get_page_from_freelist+0x31a1/0x3320 [ 329.657862][ T6724] __alloc_pages+0x28d/0x770 [ 329.662908][ T6724] __folio_alloc+0xf/0x30 [ 329.667232][ T6724] vma_alloc_folio+0x486/0x990 [ 329.671998][ T6724] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 329.677731][ T6724] shmem_get_folio_gfp+0x13f0/0x3470 [ 329.683018][ T6724] shmem_write_begin+0x16e/0x4e0 [ 329.687966][ T6724] generic_perform_write+0x2fc/0x5e0 [ 329.693248][ T6724] __generic_file_write_iter+0x176/0x400 [ 329.698879][ T6724] generic_file_write_iter+0xab/0x310 [ 329.704253][ T6724] vfs_write+0x7ae/0xba0 [ 329.708493][ T6724] ksys_write+0x19c/0x2c0 [ 329.712813][ T6724] do_syscall_64+0x3b/0xb0 [ 329.717234][ T6724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.723131][ T6724] page last free stack trace: [ 329.727792][ T6724] free_unref_page_prepare+0xf63/0x1120 [ 329.733335][ T6724] free_unref_page_list+0x663/0x900 [ 329.738526][ T6724] release_pages+0x2836/0x2b40 [ 329.743286][ T6724] __pagevec_release+0x80/0xf0 [ 329.748045][ T6724] shmem_undo_range+0x865/0x2390 [ 329.752985][ T6724] shmem_evict_inode+0x265/0xa60 [ 329.757923][ T6724] evict+0x2a4/0x620 [ 329.761816][ T6724] __dentry_kill+0x436/0x650 [ 329.766522][ T6724] dentry_kill+0xbb/0x290 [ 329.770931][ T6724] dput+0xfb/0x1d0 [ 329.774645][ T6724] __fput+0x5e4/0x890 [ 329.780017][ T6724] task_work_run+0x246/0x300 [ 329.785050][ T6724] exit_to_user_mode_loop+0xde/0x100 [ 329.790341][ T6724] exit_to_user_mode_prepare+0xb1/0x140 [ 329.795881][ T6724] syscall_exit_to_user_mode+0x60/0x270 [ 329.801456][ T6724] do_syscall_64+0x47/0xb0 [ 329.805892][ T6724] [ 329.808208][ T6724] Memory state around the buggy address: [ 329.813849][ T6724] ffff88804d5aff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 329.821918][ T6724] ffff88804d5aff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2024/06/03 15:22:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 329.829978][ T6724] >ffff88804d5b0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 329.838032][ T6724] ^ [ 329.842090][ T6724] ffff88804d5b0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 329.850145][ T6724] ffff88804d5b0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 329.858198][ T6724] ================================================================== [ 330.031513][ T6335] EXT4-fs (loop0): unmounting filesystem. [ 330.083922][ T6724] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 330.091170][ T6724] CPU: 1 PID: 6724 Comm: syz-executor.1 Not tainted 6.1.92-syzkaller #0 [ 330.099515][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 330.109581][ T6724] Call Trace: [ 330.112873][ T6724] [ 330.115800][ T6724] dump_stack_lvl+0x1e3/0x2cb [ 330.120483][ T6724] ? nf_tcp_handle_invalid+0x642/0x642 [ 330.125944][ T6724] ? panic+0x764/0x764 [ 330.130027][ T6724] ? preempt_schedule_common+0xa6/0xd0 [ 330.135505][ T6724] ? vscnprintf+0x59/0x80 [ 330.139855][ T6724] panic+0x318/0x764 [ 330.143750][ T6724] ? check_panic_on_warn+0x1d/0xa0 [ 330.148900][ T6724] ? memcpy_page_flushcache+0xfc/0xfc [ 330.154284][ T6724] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 330.160275][ T6724] ? _raw_spin_unlock+0x40/0x40 [ 330.165134][ T6724] ? print_report+0x4a3/0x4f0 [ 330.169815][ T6724] check_panic_on_warn+0x7e/0xa0 [ 330.174760][ T6724] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 330.180442][ T6724] end_report+0x66/0x110 [ 330.184688][ T6724] kasan_report+0x143/0x160 [ 330.189195][ T6724] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 330.194866][ T6724] ext4_xattr_delete_inode+0xcd0/0xce0 [ 330.200338][ T6724] ? ext4_blocks_for_truncate+0x270/0x270 [ 330.206066][ T6724] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 330.212140][ T6724] ? rcu_read_lock_any_held+0xb3/0x160 [ 330.217618][ T6724] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 330.223512][ T6724] ext4_evict_inode+0xc77/0x1150 [ 330.228453][ T6724] ? _raw_spin_unlock+0x24/0x40 [ 330.233305][ T6724] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 330.239195][ T6724] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 330.245083][ T6724] evict+0x2a4/0x620 [ 330.248993][ T6724] vfs_rmdir+0x381/0x4b0 [ 330.253236][ T6724] do_rmdir+0x3a2/0x590 [ 330.257395][ T6724] ? d_delete_notify+0x150/0x150 [ 330.262337][ T6724] ? syscall_enter_from_user_mode+0x2e/0x230 [ 330.268322][ T6724] __x64_sys_unlinkat+0xdc/0xf0 [ 330.273173][ T6724] do_syscall_64+0x3b/0xb0 [ 330.277593][ T6724] ? clear_bhb_loop+0x45/0xa0 [ 330.282278][ T6724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.288182][ T6724] RIP: 0033:0x7fd70e07c6c7 [ 330.292595][ T6724] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 330.312204][ T6724] RSP: 002b:00007fff6d560848 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 330.320617][ T6724] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fd70e07c6c7 [ 330.328596][ T6724] RDX: 0000000000000200 RSI: 00007fff6d5619f0 RDI: 00000000ffffff9c [ 330.336563][ T6724] RBP: 00007fd70e0c8336 R08: 0000000000000000 R09: 0000000000000000 [ 330.344543][ T6724] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff6d5619f0 [ 330.352539][ T6724] R13: 00007fd70e0c8336 R14: 0000000000050376 R15: 0000000000000009 [ 330.360530][ T6724] [ 330.363665][ T6724] Kernel Offset: disabled [ 330.367984][ T6724] Rebooting in 86400 seconds..