last executing test programs: 44.65562205s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045515, 0xffffffffffffffff) 44.569611163s ago: executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1, &(0x7f00000004c0)=@raw=[@func], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 44.436424654s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x2, 0x0) 44.326460161s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 44.2041762s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 43.967120777s ago: executing program 4: socket(0x10, 0x400000000080803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r3, &(0x7f0000000200)={'c', ' *:* ', 'rwm\x00'}, 0xa) mkdir(&(0x7f0000001200)='./control\x00', 0x0) chmod(&(0x7f0000000940)='./control\x00', 0x9c32f69e6caa24ef) lchown(&(0x7f0000000000)='./control\x00', 0x0, 0xee00) open(&(0x7f0000000080)='./control\x00', 0x551a01, 0x408) 34.345962834s ago: executing program 0: unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) 32.920713183s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x55555ede6001) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f00000002c0)=ANY=[@ANYBLOB='nobarrier,decompose,gid=', @ANYRESHEX, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d64656661756c742c001bb4a4447bd69aa8532125707aa318f1e60d28086a88ef2208cc30839fc1be7ad88539fad2c027aca664454d7bf988a9fa9f5f0cab42326f5c70febc7902ce02b8ec0adb23bef1c917d0bd"], 0x1, 0x6e3, &(0x7f00000009c0)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) syz_genetlink_get_family_id$ethtool(0x0, r8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000680)) sendmmsg$unix(r7, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 31.920618337s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 31.761813231s ago: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0xf, 0x0, &(0x7f0000001280)) 31.70240392s ago: executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000140)) 31.683500453s ago: executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x1406, 0x1, 0x0, 0x0, "", [{{0xd, 0x60, 'syz1\x00'}, {0x10, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x38}, 0x1, 0x1f00}, 0x0) 31.536111666s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCSETS(r0, 0x5420, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) 31.50939642s ago: executing program 0: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0xfd, 0x1e1, &(0x7f0000000400)="$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") 31.298338032s ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 31.245036531s ago: executing program 0: unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) 31.239595962s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.067464217s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 30.885148686s ago: executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x1406, 0x1, 0x0, 0x0, "", [{{0xd, 0x60, 'syz1\x00'}, {0x10, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x38}, 0x1, 0x1f00}, 0x0) 30.774054553s ago: executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x2, 0x0, "5466603fec0771640853cd154f88871df01f3653c1f5aaf8e71216809eba2cb2"}) 30.59899032s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000007000000000000001000e652000000000000000005000000800000000000000000000000000038000116d71b3c84239973c888988b60a2d33c63de964af863a6a07c6d47bb5f6eb99445648ff7e40e0cadd985084b55a257"], 0x78) r4 = inotify_init1(0x0) dup3(r4, r3, 0x0) r5 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f0000000500)={r7, r8, 0x101, 0x4, 0x6}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)=',:::/', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="e613dea6d6b67c8efbae7031262e9dd7803b6338b271a291f2b6dc29ecb7a10b9b27b389191915f1f94ac61d4051b691132cd847b31fb0f09cd72cf1793d83504e21908c169b3ad6007c31db84820483a49ad2f8ca0b67b14ff084b1d123c6e7", @ANYBLOB="2e8082eeed70dc2150e1e9c77e7ebe9f1f050f784ffe9aa150c699499e4d08b60b8a616b4c7dd33a38ee4061c7daee4f20cd5b16c3ba816fd72af3fa49530205b2bdcc15268ab5214ff1ef72d93d39103ebc936c3d667137dc3f50ab0bbc0c9d8895bab59e748516832caa031239806fc8a5b22d0ee1ac563c96f32aa630b7c38055c0841c4174c165d26914f356995ad9ab7df91f00ef50eda854d9df44c83fedc0a1d554aa15cb45c8cbb604532d02fbd3702f88cf35edc2f2b0d4b25a443a64df43ed6c2d7896528d9e9e4a67679e710cd74e44afbfa49126b0fb1361ff69e36f85d1c5", @ANYRES32=r5, @ANYRESDEC=r2], 0x284) 30.511471023s ago: executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="3d0200000400000005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d) 30.367003026s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 30.242303404s ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TCSETS(r0, 0x5420, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) 30.125487612s ago: executing program 3: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0xfd, 0x1e1, &(0x7f0000000400)="$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") 30.018123689s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x800}, @val={0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x2e) 1.213298454s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)=""/163, 0xa3}, {&(0x7f00000005c0)=""/4086, 0xff6}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3}, 0x0) 1.190655347s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$bt_BT_SECURITY(r0, 0x6a, 0x2, 0x0, 0x20000000) 584.339571ms ago: executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, 0xffffffffffffffff, 0x3, 0x0, 0x0, @prog_id}, 0x20) 0s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 730972][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.973908][ T4055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.023124][ T4055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.046372][ T4055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.069910][ T4055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.384316][ T4055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.437773][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.450235][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.483481][ T4055] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.493992][ T4173] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 93.371906][ T3588] Bluetooth: hci1: command tx timeout [ 93.399204][ T4150] loop4: detected capacity change from 0 to 32768 [ 93.400279][ T4165] loop2: detected capacity change from 0 to 32768 [ 93.438182][ T4150] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.476869][ T4150] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 93.543061][ T4165] XFS (loop2): Mounting V5 Filesystem [ 93.612406][ T4150] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 93.626722][ T3660] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 93.637934][ T3660] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 93.649446][ T4167] loop3: detected capacity change from 0 to 40427 [ 93.772685][ T4167] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.782565][ T3660] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 93.796723][ T3660] gfs2: fsid=syz:syz.0: jid=0: Done [ 93.816270][ T4150] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 93.980945][ T4167] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.998633][ T4165] XFS (loop2): Ending clean mount [ 94.089683][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.098485][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.212561][ T3575] syz-executor.3: attempt to access beyond end of device [ 94.212561][ T3575] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.457579][ T3868] XFS (loop2): Unmounting Filesystem [ 95.079762][ T4216] kernel read not supported for file /cgroup.controllers (pid: 4216 comm: syz-executor.4) [ 95.102607][ T27] audit: type=1800 audit(1717509948.905:88): pid=4216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="mqueue" ino=34385 res=0 errno=0 [ 95.189621][ T4173] device bridge_slave_0 left promiscuous mode [ 95.197488][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.312727][ T4223] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 95.334809][ T4173] device bridge_slave_1 left promiscuous mode [ 95.345088][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.401756][ T4225] loop4: detected capacity change from 0 to 512 [ 95.445217][ T4173] bond0: (slave bond_slave_0): Releasing backup interface [ 95.450388][ T4225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.461838][ T3588] Bluetooth: hci1: command tx timeout [ 95.471746][ T4225] ext4 filesystem being mounted at /root/syzkaller-testdir1994811465/syzkaller.Qbpa09/32/file0 supports timestamps until 2038 (0x7fffffff) [ 95.500887][ T3292] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.520949][ T3620] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.534971][ T4173] bond0: (slave bond_slave_1): Releasing backup interface [ 95.543125][ T4225] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #12: block 32: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 95.565332][ T4225] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #12: comm syz-executor.4: directory missing '.' [ 95.626406][ T4173] team0: Port device team_slave_0 removed [ 95.626591][ T3576] EXT4-fs (loop4): unmounting filesystem. [ 95.714282][ T4173] team0: Port device team_slave_1 removed [ 95.725355][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.735461][ T4230] loop4: detected capacity change from 0 to 1024 [ 95.762589][ T3292] usb 4-1: Using ep0 maxpacket: 32 [ 95.781153][ T3620] usb 3-1: Using ep0 maxpacket: 8 [ 95.789230][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.844510][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.849834][ T4230] hfsplus: bad catalog entry type [ 95.885755][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.909442][ T102] hfsplus: b-tree write err: -5, ino 4 [ 95.911032][ T3620] usb 3-1: config 0 has no interfaces? [ 95.929475][ T3292] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 95.939408][ T3292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.992040][ T3292] usb 4-1: config 0 descriptor?? [ 96.001295][ T3620] usb 3-1: config 0 has no interfaces? [ 96.042478][ T3292] gspca_main: sunplus-2.14.0 probing 041e:400b [ 96.091274][ T3620] usb 3-1: config 0 has no interfaces? [ 96.253254][ T3620] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.263254][ T3620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.274224][ T3620] usb 3-1: Product: syz [ 96.278425][ T3620] usb 3-1: Manufacturer: syz [ 96.284338][ T3620] usb 3-1: SerialNumber: syz [ 96.290521][ T3620] usb 3-1: config 0 descriptor?? [ 96.541661][ T3927] usb 3-1: USB disconnect, device number 2 [ 96.549587][ T4173] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.569028][ T4173] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.579747][ T4173] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.588914][ T4173] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.747641][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.760082][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.771730][ T3928] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.778961][ T3928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.825824][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.834984][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.844032][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.859442][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.866689][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.880033][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.901503][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.926672][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.954422][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.968523][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.985341][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.025612][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.038782][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.049196][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.059127][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.078204][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.101630][ T4055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.111014][ T3292] gspca_sunplus: reg_w_riv err -71 [ 97.116615][ T3292] sunplus: probe of 4-1:0.0 failed with error -71 [ 97.168003][ T3292] usb 4-1: USB disconnect, device number 5 [ 97.398527][ T4250] loop2: detected capacity change from 0 to 256 [ 97.504476][ T4250] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 97.699141][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.716626][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.769008][ T4055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.795663][ T4256] loop2: detected capacity change from 0 to 2048 [ 97.816215][ T4258] loop3: detected capacity change from 0 to 1024 [ 97.850483][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.864018][ T4256] NILFS (loop2): invalid segment: Magic number mismatch [ 97.882842][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.890313][ T4258] hfsplus: bad catalog entry type [ 97.891152][ T4256] NILFS (loop2): trying rollback from an earlier position [ 97.923937][ T4256] NILFS (loop2): recovery complete [ 97.955092][ T4261] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.955736][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.981145][ T3919] hfsplus: b-tree write err: -5, ino 4 [ 98.026162][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.064652][ T4055] device veth0_vlan entered promiscuous mode [ 98.092375][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.111277][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.130520][ T4055] device veth1_vlan entered promiscuous mode [ 98.217525][ T4055] device veth0_macvtap entered promiscuous mode [ 98.259389][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.271812][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.287189][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.314080][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.335661][ T4055] device veth1_macvtap entered promiscuous mode [ 98.349184][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.363161][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.400928][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.401644][ T4266] loop2: detected capacity change from 0 to 1024 [ 98.421939][ T4266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.433780][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.462369][ T4266] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.490619][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.519242][ T4266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.530869][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.563567][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.564867][ T4266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 98.596700][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.609935][ T4266] System zones: 0-1, 3-36 [ 98.610281][ T4241] loop4: detected capacity change from 0 to 40427 [ 98.623322][ T4266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.643761][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.655485][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.681671][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.706968][ T4241] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.714987][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.725129][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.743030][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.761246][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.782367][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.802797][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.855912][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.884198][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.899360][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.925224][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.935381][ T4241] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.973427][ T3868] EXT4-fs (loop2): unmounting filesystem. [ 98.974103][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.991488][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.002381][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.051186][ T4055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.060131][ T4055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.080498][ T4055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.097783][ T4055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.136988][ T3576] syz-executor.4: attempt to access beyond end of device [ 99.136988][ T3576] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.363623][ T4264] loop3: detected capacity change from 0 to 32768 [ 99.431173][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.440518][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.506798][ T4264] XFS (loop3): Mounting V5 Filesystem [ 99.538502][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.639936][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.693014][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.725046][ T4264] XFS (loop3): Ending clean mount [ 99.755119][ T4294] loop0: detected capacity change from 0 to 1024 [ 99.786497][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.888198][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.925557][ T4294] hfsplus: bad catalog entry type [ 99.935696][ T3575] XFS (loop3): Unmounting Filesystem [ 100.033562][ T3919] hfsplus: b-tree write err: -5, ino 4 [ 100.053559][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.083010][ T4299] delete_channel: no stack [ 100.204356][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.220934][ T3930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.324044][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.335477][ T4304] loop1: detected capacity change from 0 to 256 [ 100.379870][ T4304] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 100.460869][ T3619] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.592143][ T3930] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 100.627419][ T3930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.654519][ T3930] usb 5-1: config 0 descriptor?? [ 100.694456][ T27] audit: type=1804 audit(1717509954.495:89): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/2/file0" dev="sda1" ino=1959 res=1 errno=0 [ 100.881936][ T3619] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.889293][ T3589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.911676][ T3589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.925529][ T3589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.926479][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.943081][ T3583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.952844][ T3583] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.960659][ T3583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.978478][ T3619] usb 1-1: config 0 descriptor?? [ 101.091130][ T4319] loop3: detected capacity change from 0 to 2048 [ 101.174960][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.291614][ T3619] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 101.303954][ T3619] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 101.384658][ T3619] [drm:udl_init] *ERROR* Selecting channel failed [ 101.415133][ T27] audit: type=1804 audit(1717509955.215:90): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3056842912/syzkaller.wfxf34/40/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 101.490231][ T3619] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 101.497859][ T27] audit: type=1804 audit(1717509955.255:91): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3056842912/syzkaller.wfxf34/40/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 101.592771][ T3619] [drm] Initialized udl on minor 2 [ 101.603310][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 101.628429][ T3619] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.656278][ T3619] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 101.698052][ T3619] usb 1-1: USB disconnect, device number 4 [ 101.964267][ T4345] kernel read not supported for file /cgroup.controllers (pid: 4345 comm: syz-executor.0) [ 101.974998][ T27] audit: type=1800 audit(1717509955.785:92): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="mqueue" ino=35478 res=0 errno=0 [ 102.040231][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.055812][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.078702][ T3575] EXT4-fs (loop3): unmounting filesystem. [ 102.088909][ T4315] device bridge_slave_0 entered promiscuous mode [ 102.124370][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.148525][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.177681][ T4315] device bridge_slave_1 entered promiscuous mode [ 102.338733][ T46] device hsr_slave_0 left promiscuous mode [ 102.366636][ T46] device hsr_slave_1 left promiscuous mode [ 102.377693][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.415719][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.434671][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.456884][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.471164][ T3930] usb 5-1: Cannot set autoneg [ 102.477144][ T3930] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 102.488338][ T46] device bridge_slave_1 left promiscuous mode [ 102.506275][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.513877][ T4355] loop3: detected capacity change from 0 to 1024 [ 102.529918][ T3930] usb 5-1: USB disconnect, device number 3 [ 102.565814][ T46] device bridge_slave_0 left promiscuous mode [ 102.586714][ T4355] hfsplus: bad catalog entry type [ 102.596134][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.614612][ T46] device veth1_macvtap left promiscuous mode [ 102.628951][ T46] device veth0_macvtap left promiscuous mode [ 102.637112][ T46] device veth1_vlan left promiscuous mode [ 102.662730][ T11] hfsplus: b-tree write err: -5, ino 4 [ 102.669827][ T46] device veth0_vlan left promiscuous mode [ 102.772257][ T4359] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.815213][ T3657] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.921720][ T4361] loop3: detected capacity change from 0 to 256 [ 103.051216][ T3588] Bluetooth: hci4: command tx timeout [ 103.053116][ T4361] FAT-fs (loop3): Directory bread(block 64) failed [ 103.071051][ T3657] usb 1-1: Using ep0 maxpacket: 8 [ 103.079043][ T4361] FAT-fs (loop3): Directory bread(block 65) failed [ 103.113065][ T4361] FAT-fs (loop3): Directory bread(block 66) failed [ 103.137565][ T4361] FAT-fs (loop3): Directory bread(block 67) failed [ 103.164041][ T4361] FAT-fs (loop3): Directory bread(block 68) failed [ 103.188111][ T4361] FAT-fs (loop3): Directory bread(block 69) failed [ 103.201353][ T3657] usb 1-1: config 0 has no interfaces? [ 103.216298][ T4361] FAT-fs (loop3): Directory bread(block 70) failed [ 103.232378][ T4361] FAT-fs (loop3): Directory bread(block 71) failed [ 103.247275][ T4361] FAT-fs (loop3): Directory bread(block 72) failed [ 103.264518][ T4361] FAT-fs (loop3): Directory bread(block 73) failed [ 103.301417][ T3657] usb 1-1: config 0 has no interfaces? [ 103.356197][ T46] team0 (unregistering): Port device team_slave_1 removed [ 103.401008][ T3657] usb 1-1: config 0 has no interfaces? [ 103.410374][ T46] team0 (unregistering): Port device team_slave_0 removed [ 103.445656][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.508399][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.561082][ T3657] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 103.578045][ T3657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.606559][ T3657] usb 1-1: Product: syz [ 103.616598][ T3657] usb 1-1: Manufacturer: syz [ 103.629194][ T3657] usb 1-1: SerialNumber: syz [ 103.658029][ T3657] usb 1-1: config 0 descriptor?? [ 103.667664][ T4371] loop1: detected capacity change from 0 to 2048 [ 103.713967][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.806114][ T27] audit: type=1804 audit(1717509957.605:93): pid=4371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/7/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 103.832357][ T27] audit: type=1804 audit(1717509957.605:94): pid=4371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/7/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 103.906378][ T46] bond0 (unregistering): Released all slaves [ 103.940193][ T3930] usb 1-1: USB disconnect, device number 5 [ 103.998320][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.167370][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.332476][ T4315] team0: Port device team_slave_0 added [ 104.352404][ T4315] team0: Port device team_slave_1 added [ 104.479080][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.496022][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.621213][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.731663][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.738664][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.872134][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.967026][ T4055] EXT4-fs (loop1): unmounting filesystem. [ 105.085673][ T4315] device hsr_slave_0 entered promiscuous mode [ 105.119262][ T4315] device hsr_slave_1 entered promiscuous mode [ 105.130875][ T3588] Bluetooth: hci4: command tx timeout [ 105.153443][ T4315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.183227][ T4315] Cannot create hsr debugfs directory [ 105.309839][ T4397] loop0: detected capacity change from 0 to 8192 [ 105.374170][ T4406] loop1: detected capacity change from 0 to 64 [ 105.412181][ T4397] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.470878][ T4397] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 105.488441][ T4397] REISERFS (device loop0): using ordered data mode [ 105.571212][ T4397] reiserfs: using flush barriers [ 105.631979][ T4397] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.688861][ T4397] REISERFS (device loop0): checking transaction log (loop0) [ 105.754908][ T3589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.762422][ T4397] REISERFS (device loop0): Using r5 hash to sort names [ 105.786400][ T3583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.795702][ T3583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.805361][ T3583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.813138][ T3583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.820439][ T3583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.861447][ T4397] reiserfs: enabling write barrier flush mode [ 105.971399][ T4397] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 106.432510][ T4425] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿ0xffffffffffffffff" [ 106.775672][ T4315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.824171][ T4315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.851863][ T4315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.894659][ T4414] chnl_net:caif_netlink_parms(): no params data found [ 106.925554][ T4315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.200894][ T3928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.211015][ T3588] Bluetooth: hci4: command tx timeout [ 107.287098][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.304566][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.319760][ T4414] device bridge_slave_0 entered promiscuous mode [ 107.381019][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.396142][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.416660][ T4414] device bridge_slave_1 entered promiscuous mode [ 107.529987][ T4414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.571142][ T3928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 107.588874][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.601455][ T3928] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 107.622496][ T4414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.652092][ T3928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.685705][ T3928] usb 2-1: config 0 descriptor?? [ 107.729123][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.743298][ T3928] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 107.757625][ T4455] loop0: detected capacity change from 0 to 2048 [ 107.778411][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.800714][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.812412][ T4424] loop4: detected capacity change from 0 to 32768 [ 107.830492][ T4414] team0: Port device team_slave_0 added [ 107.851726][ T3588] Bluetooth: hci0: command tx timeout [ 107.871374][ T4424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4424) [ 107.885213][ T4455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.917966][ T4424] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.933198][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.961652][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.970245][ T3930] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.977435][ T3930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.998615][ T4424] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 108.011525][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.029905][ T27] audit: type=1804 audit(1717509961.825:95): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/44/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 108.061181][ T4424] BTRFS info (device loop4): using free space tree [ 108.091430][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.100045][ T3930] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.107289][ T3930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.140525][ T27] audit: type=1804 audit(1717509961.825:96): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/44/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 108.202206][ T4414] team0: Port device team_slave_1 added [ 108.218915][ T3930] usb 2-1: USB disconnect, device number 4 [ 108.310206][ T4424] BTRFS info (device loop4): enabling ssd optimizations [ 108.333915][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.352065][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.361878][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.391949][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.401844][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.410699][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.441833][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.458012][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.481733][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.488859][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.563736][ T4414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.585670][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.596443][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.639218][ T4315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.672668][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.685847][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.693795][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.718141][ T3576] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.801021][ T4414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.991752][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.000439][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.139109][ T4414] device hsr_slave_0 entered promiscuous mode [ 109.222294][ T4414] device hsr_slave_1 entered promiscuous mode [ 109.232016][ T3584] EXT4-fs (loop0): unmounting filesystem. [ 109.248938][ T4414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.277829][ T4414] Cannot create hsr debugfs directory [ 109.291171][ T3588] Bluetooth: hci4: command tx timeout [ 109.479516][ T4502] loop4: detected capacity change from 0 to 256 [ 109.529880][ T4502] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 109.591476][ T4502] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 109.713740][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.720890][ T4502] loop4: detected capacity change from 256 to 64 [ 109.753468][ T4508] syz-executor.4: attempt to access beyond end of device [ 109.753468][ T4508] loop4: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 109.823663][ T4508] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 109.842894][ T4508] syz-executor.4: attempt to access beyond end of device [ 109.842894][ T4508] loop4: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 109.860087][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.871232][ T4508] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 109.915073][ T4508] syz-executor.4: attempt to access beyond end of device [ 109.915073][ T4508] loop4: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 109.933247][ T3588] Bluetooth: hci0: command tx timeout [ 109.943499][ T4508] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 109.972359][ T4508] syz-executor.4: attempt to access beyond end of device [ 109.972359][ T4508] loop4: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 110.011495][ T4508] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 110.039017][ T4508] exFAT-fs (loop4): error, failed to bmap (inode : ffff888053c88160 iblock : 24, err : -5) [ 110.060807][ T4508] exFAT-fs (loop4): Filesystem has been set read-only [ 110.098280][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.119720][ T4508] syz-executor.4: attempt to access beyond end of device [ 110.119720][ T4508] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 110.143824][ T4508] Buffer I/O error on dev loop4, logical block 161, lost sync page write [ 110.159453][ T4508] syz-executor.4: attempt to access beyond end of device [ 110.159453][ T4508] loop4: rw=2049, sector=208, nr_sectors = 24 limit=64 [ 110.220344][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.234715][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.253774][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.272508][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.326733][ T4513] loop0: detected capacity change from 0 to 64 [ 110.356694][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.370110][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.419961][ T4495] loop1: detected capacity change from 0 to 32768 [ 110.451720][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.481234][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.500027][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.547621][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.585765][ T4315] device veth0_vlan entered promiscuous mode [ 110.651907][ T4315] device veth1_vlan entered promiscuous mode [ 110.753029][ T4518] loop0: detected capacity change from 0 to 64 [ 110.775777][ T3576] syz-executor.4: attempt to access beyond end of device [ 110.775777][ T3576] loop4: rw=0, sector=161, nr_sectors = 1 limit=64 [ 110.833401][ T3576] syz-executor.4: attempt to access beyond end of device [ 110.833401][ T3576] loop4: rw=0, sector=161, nr_sectors = 1 limit=64 [ 110.880257][ T3576] syz-executor.4: attempt to access beyond end of device [ 110.880257][ T3576] loop4: rw=0, sector=161, nr_sectors = 1 limit=64 [ 111.090011][ T4523] loop0: detected capacity change from 0 to 512 [ 111.182594][ T3567] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.240688][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.258370][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.299447][ T4315] device veth0_macvtap entered promiscuous mode [ 111.370093][ T4315] device veth1_macvtap entered promiscuous mode [ 111.466515][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.502970][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.524360][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.546807][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.577327][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.604376][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.628270][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.650232][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.700983][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.734250][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.743835][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.768268][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.784338][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.842788][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.881350][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.900880][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.926088][ T4534] loop0: detected capacity change from 0 to 8192 [ 111.938866][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.977028][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.011095][ T3588] Bluetooth: hci0: command tx timeout [ 112.015388][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.059004][ T4539] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.087611][ T4315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.120811][ T4315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.168096][ T27] audit: type=1804 audit(1717509965.965:97): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/51/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 112.195981][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.239016][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.249523][ T27] audit: type=1804 audit(1717509966.005:98): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/51/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 112.279525][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.296414][ T4524] loop1: detected capacity change from 0 to 32768 [ 112.302518][ T4315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.319698][ T4315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.340535][ T4315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.349954][ T27] audit: type=1804 audit(1717509966.005:99): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/51/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 112.394553][ T4315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.484521][ T4524] XFS (loop1): Mounting V5 Filesystem [ 112.506868][ T3589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.520016][ T3589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.536361][ T3589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.551848][ T3589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.560560][ T3589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.568055][ T3589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.593915][ T4524] XFS (loop1): Ending clean mount [ 112.611495][ T4524] XFS (loop1): Quotacheck needed: Please wait. [ 112.761562][ T4524] XFS (loop1): Quotacheck: Done. [ 112.830235][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.846474][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.865721][ T4556] loop0: detected capacity change from 0 to 64 [ 112.938206][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.023639][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.044958][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.087414][ T4414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.173805][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.258164][ T4414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.307906][ T4414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.393920][ T4414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.433929][ T46] device hsr_slave_0 left promiscuous mode [ 113.452806][ T46] device hsr_slave_1 left promiscuous mode [ 113.484954][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.495202][ T4055] XFS (loop1): Unmounting Filesystem [ 113.518478][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.558921][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.595498][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.629814][ T46] device bridge_slave_1 left promiscuous mode [ 113.647597][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.684433][ T46] device bridge_slave_0 left promiscuous mode [ 113.691241][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.740313][ T46] device veth1_macvtap left promiscuous mode [ 113.751152][ T46] device veth0_macvtap left promiscuous mode [ 113.770426][ T46] device veth1_vlan left promiscuous mode [ 113.789380][ T46] device veth0_vlan left promiscuous mode [ 114.015839][ T4577] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 114.098024][ T3589] Bluetooth: hci0: command tx timeout [ 114.195792][ T4581] loop1: detected capacity change from 0 to 64 [ 114.397195][ T4583] loop1: detected capacity change from 0 to 512 [ 114.409619][ T46] team0 (unregistering): Port device team_slave_1 removed [ 114.442270][ T4562] loop0: detected capacity change from 0 to 32768 [ 114.451844][ T46] team0 (unregistering): Port device team_slave_0 removed [ 114.519037][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.573779][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.650948][ T3589] Bluetooth: hci2: command tx timeout [ 114.717317][ T46] bond0 (unregistering): Released all slaves [ 115.228918][ T4547] chnl_net:caif_netlink_parms(): no params data found [ 115.318595][ T4414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.469220][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.491902][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.545290][ T4414] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.601301][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.610219][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.659997][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.667237][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.720854][ T151] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.742017][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.754835][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.771789][ T4547] device bridge_slave_0 entered promiscuous mode [ 115.801700][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.812352][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.827467][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.855337][ T4547] device bridge_slave_1 entered promiscuous mode [ 115.936943][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.948595][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.974933][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.982143][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.033651][ T4547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.045987][ T4604] loop2: detected capacity change from 0 to 32768 [ 116.106517][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.131072][ T151] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.162088][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.191064][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.200569][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.208785][ T151] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.222633][ T151] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.240071][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.249278][ T151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.258584][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.275264][ T4547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.287430][ T4604] XFS (loop2): Mounting V5 Filesystem [ 116.291381][ T4613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.334660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.409088][ T4414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.420501][ T4604] XFS (loop2): Ending clean mount [ 116.442966][ T4604] XFS (loop2): Quotacheck needed: Please wait. [ 116.444022][ T4414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.486149][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.498379][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.508726][ T4604] XFS (loop2): Quotacheck: Done. [ 116.558509][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.594217][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.649252][ T3935] usb 1-1: USB disconnect, device number 6 [ 116.667078][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.692731][ T4547] team0: Port device team_slave_0 added [ 116.704276][ T4547] team0: Port device team_slave_1 added [ 116.731667][ T3589] Bluetooth: hci2: command tx timeout [ 116.824140][ T4315] XFS (loop2): Unmounting Filesystem [ 116.850554][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.888005][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.944699][ T4547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.973161][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.997531][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.119876][ T4547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.246057][ T4547] device hsr_slave_0 entered promiscuous mode [ 117.267656][ T4547] device hsr_slave_1 entered promiscuous mode [ 117.283753][ T4547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.319022][ T4547] Cannot create hsr debugfs directory [ 117.501020][ T4632] loop2: detected capacity change from 0 to 512 [ 117.515168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.543836][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.579791][ T4414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.588817][ T3567] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.717152][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.737267][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.801077][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.809655][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.830215][ T4414] device veth0_vlan entered promiscuous mode [ 117.865431][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.891683][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.907679][ T4414] device veth1_vlan entered promiscuous mode [ 117.998775][ T4547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.120984][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.129804][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.179494][ T4547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.226597][ T4414] device veth0_macvtap entered promiscuous mode [ 118.249732][ T4414] device veth1_macvtap entered promiscuous mode [ 118.319234][ T4547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.353648][ T4639] loop2: detected capacity change from 0 to 4096 [ 118.366913][ T4639] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 118.400581][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.430821][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.441231][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.456247][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.488482][ T4639] ntfs: volume version 3.1. [ 118.500813][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.535280][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.561879][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.599814][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.633520][ T4643] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.653231][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.684164][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.704997][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.733342][ T4633] loop0: detected capacity change from 0 to 32768 [ 118.759522][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.789017][ T3567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (3567) [ 118.811266][ T3589] Bluetooth: hci2: command tx timeout [ 118.817761][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.861797][ T4633] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.899785][ T4547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.930987][ T4633] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 118.945236][ T4633] BTRFS info (device loop0): using free space tree [ 118.955922][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.000912][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.040840][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.077738][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.088874][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.099906][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.119056][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.130148][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.150109][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.152608][ T4633] BTRFS info (device loop0): enabling ssd optimizations [ 119.183387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.203086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.235508][ T27] audit: type=1800 audit(1717509973.035:100): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 119.286577][ T27] audit: type=1804 audit(1717509973.065:101): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/60/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 119.315282][ T27] audit: type=1804 audit(1717509973.075:102): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/60/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 119.320216][ T4414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.409717][ T4414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.430160][ T4414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.454678][ T4414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.680182][ T3584] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.739468][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.770043][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.890062][ T4547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.918177][ T4673] loop1: detected capacity change from 0 to 64 [ 119.963412][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.982247][ T4547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.005774][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.022853][ T4547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.058060][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.068885][ T4547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.144818][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.377754][ T4680] loop1: detected capacity change from 0 to 512 [ 120.424149][ T27] audit: type=1804 audit(1717509974.225:103): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2012061061/syzkaller.DNWc3M/0/file0" dev="sda1" ino=1956 res=1 errno=0 [ 120.459310][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.563866][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.606325][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.666069][ T4547] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.711489][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.723833][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.739967][ T4693] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.761574][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.768788][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.825875][ T4698] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.877527][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.890877][ T3589] Bluetooth: hci2: command tx timeout [ 120.896938][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.937352][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.999421][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.006731][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.043842][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.070299][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.100086][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.130400][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.162648][ T4706] loop0: detected capacity change from 0 to 4096 [ 121.164400][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.206148][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.224811][ T4706] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 121.290336][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.303539][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.323694][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.344035][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.353070][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.365873][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.370577][ T4706] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 121.624168][ T27] audit: type=1800 audit(1717509975.425:104): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=0 res=0 errno=0 [ 121.713719][ T4719] ntfs3: loop0: mft corrupted [ 121.893464][ T4729] loop3: detected capacity change from 0 to 512 [ 121.965516][ T3567] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.171848][ T33] device hsr_slave_0 left promiscuous mode [ 122.181315][ T4702] loop1: detected capacity change from 0 to 32768 [ 122.217540][ T4702] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4702) [ 122.232158][ T33] device hsr_slave_1 left promiscuous mode [ 122.241433][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.248905][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.283586][ T4702] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.287317][ T4735] loop3: detected capacity change from 0 to 1024 [ 122.314013][ T4702] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.316808][ T4740] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.331279][ T4702] BTRFS info (device loop1): using free space tree [ 122.341856][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.349324][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.397413][ T4735] hfsplus: bad catalog entry type [ 122.416186][ T33] device bridge_slave_1 left promiscuous mode [ 122.467906][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.477633][ T4738] loop0: detected capacity change from 0 to 8192 [ 122.487259][ T33] device bridge_slave_0 left promiscuous mode [ 122.504164][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.565133][ T33] device veth1_macvtap left promiscuous mode [ 122.587811][ T33] device veth0_macvtap left promiscuous mode [ 122.596291][ T4702] BTRFS info (device loop1): enabling ssd optimizations [ 122.601409][ T33] device veth1_vlan left promiscuous mode [ 122.614092][ T33] device veth0_vlan left promiscuous mode [ 122.724935][ T27] audit: type=1800 audit(1717509976.525:105): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 122.781228][ T3002] udevd[3002]: worker [3568] terminated by signal 33 (Unknown signal 33) [ 122.792005][ T3002] udevd[3002]: worker [3568] failed while handling '/devices/virtual/block/loop1' [ 122.807634][ T27] audit: type=1804 audit(1717509976.565:106): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/29/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 122.880944][ T3657] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.905662][ T27] audit: type=1804 audit(1717509976.565:107): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/29/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 123.005364][ T4055] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.244249][ T4771] loop3: detected capacity change from 0 to 4096 [ 123.282266][ T4771] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 123.286463][ T3657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.302521][ T3657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.312926][ T3657] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 123.322392][ T3657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.332740][ T3657] usb 3-1: config 0 descriptor?? [ 123.410506][ T4771] ntfs3: loop3: Failed to load root. [ 123.696176][ T4793] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.813967][ T3657] wacom 0003:056A:00ED.0003: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 123.829525][ T33] team0 (unregistering): Port device team_slave_1 removed [ 123.844854][ T4797] loop3: detected capacity change from 0 to 1024 [ 123.893656][ T33] team0 (unregistering): Port device team_slave_0 removed [ 123.911237][ T4797] hfsplus: bad catalog entry type [ 123.971177][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.020666][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.029222][ T3657] usb 3-1: USB disconnect, device number 3 [ 124.234584][ T4806] loop3: detected capacity change from 0 to 4096 [ 124.243011][ T4806] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.279845][ T33] bond0 (unregistering): Released all slaves [ 124.317618][ T4806] ntfs: volume version 3.1. [ 124.430316][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.451549][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.489195][ T4547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.079245][ T4804] loop0: detected capacity change from 0 to 32768 [ 125.114418][ T4804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4804) [ 125.156981][ T4804] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.206510][ T4804] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 125.254434][ T4804] BTRFS info (device loop0): using free space tree [ 125.322756][ T4826] loop3: detected capacity change from 0 to 8192 [ 125.323418][ T4825] loop1: detected capacity change from 0 to 4096 [ 125.354043][ T4825] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 125.361976][ T4826] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.377496][ T4826] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 125.387004][ T4826] REISERFS (device loop3): using ordered data mode [ 125.395322][ T4826] reiserfs: using flush barriers [ 125.402718][ T4826] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.421057][ T4826] REISERFS (device loop3): checking transaction log (loop3) [ 125.433406][ T4826] REISERFS (device loop3): Using r5 hash to sort names [ 125.471360][ T4826] reiserfs: enabling write barrier flush mode [ 125.582008][ T4826] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 125.610714][ T4825] ntfs3: loop1: Failed to load root. [ 125.641002][ T4804] BTRFS info (device loop0): enabling ssd optimizations [ 125.781581][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.790707][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.808799][ T27] audit: type=1800 audit(1717509979.605:108): pid=4804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 125.830709][ T4856] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "ÿ0xffffffffffffffff" [ 125.904370][ T27] audit: type=1804 audit(1717509979.645:109): pid=4804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/73/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 125.954359][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.964407][ T27] audit: type=1804 audit(1717509979.655:110): pid=4804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/73/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 125.970153][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.037516][ T3584] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.042445][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.099688][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.133723][ T4547] device veth0_vlan entered promiscuous mode [ 126.212468][ T4547] device veth1_vlan entered promiscuous mode [ 126.287904][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.298239][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.315040][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.345273][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.367391][ T4547] device veth0_macvtap entered promiscuous mode [ 126.411266][ T4547] device veth1_macvtap entered promiscuous mode [ 126.475533][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.507307][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.540850][ T4778] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.552277][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.575831][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.603933][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.635184][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.657537][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.688603][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.709292][ T4867] loop0: detected capacity change from 0 to 2048 [ 126.717667][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.765366][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.781542][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.791931][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.818761][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.833944][ T4867] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.855987][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.873493][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.888591][ T4867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.910472][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.943165][ T4778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.970350][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.984856][ T4778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.016533][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.028040][ T4778] usb 2-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 127.037374][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.047427][ T4778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.067196][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.078558][ T4778] usb 2-1: config 0 descriptor?? [ 127.083842][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.103041][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.115955][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.133701][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.153816][ T4547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.185414][ T4547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.228744][ T4547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.251517][ T4547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.499047][ T3919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.525323][ T3919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.543151][ T4880] loop3: detected capacity change from 0 to 1024 [ 127.569741][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.596570][ T4778] wacom 0003:056A:00ED.0004: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.1-1/input0 [ 127.631162][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.664933][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.688658][ T4880] hfsplus: bad catalog entry type [ 127.716779][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.786974][ T4778] usb 2-1: USB disconnect, device number 5 [ 128.027692][ T4889] loop4: detected capacity change from 0 to 2048 [ 128.061901][ T4885] loop0: detected capacity change from 0 to 512 [ 128.094676][ T4885] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.167734][ T4889] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.234907][ T4885] EXT4-fs (loop0): 1 orphan inode deleted [ 128.253515][ T4885] EXT4-fs (loop0): 1 truncate cleaned up [ 128.253904][ T4899] loop3: detected capacity change from 0 to 4096 [ 128.260430][ T4885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.304439][ T4899] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 128.338979][ T27] audit: type=1804 audit(1717509982.135:111): pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3363029832/syzkaller.ka9X5l/0/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 128.391070][ T4892] kvm: emulating exchange as write [ 128.452595][ T27] audit: type=1804 audit(1717509982.135:112): pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3363029832/syzkaller.ka9X5l/0/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 128.489598][ T4899] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 128.591534][ T27] audit: type=1800 audit(1717509982.395:113): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 128.692422][ T4906] loop1: detected capacity change from 0 to 2048 [ 128.709725][ T27] audit: type=1800 audit(1717509982.415:114): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 128.801989][ T4906] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 128.838014][ T27] audit: type=1804 audit(1717509982.575:115): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2012061061/syzkaller.DNWc3M/19/bus/bus" dev="loop3" ino=33 res=1 errno=0 [ 128.884717][ T4906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.159186][ T4547] EXT4-fs (loop4): unmounting filesystem. [ 129.177045][ T3584] EXT4-fs (loop0): unmounting filesystem. [ 129.434360][ T4920] loop2: detected capacity change from 0 to 2048 [ 129.446285][ T4914] overlayfs: failed to resolve './file0': -2 [ 129.517476][ T4920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.113075][ T4942] loop4: detected capacity change from 0 to 2048 [ 130.120335][ T4938] loop1: detected capacity change from 0 to 4096 [ 130.134139][ T4941] loop2: detected capacity change from 0 to 2048 [ 130.153029][ T4938] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 130.218625][ T4942] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 130.253778][ T4942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.302041][ T4941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.436511][ T4938] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 130.501982][ T27] audit: type=1804 audit(1717509984.305:116): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1188267152/syzkaller.WhEJYu/35/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 130.592440][ T27] audit: type=1804 audit(1717509984.305:117): pid=4941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1188267152/syzkaller.WhEJYu/35/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 130.700515][ T27] audit: type=1800 audit(1717509984.395:118): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 130.775672][ T27] audit: type=1800 audit(1717509984.425:119): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 130.869248][ T27] audit: type=1804 audit(1717509984.485:120): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/39/bus/bus" dev="loop1" ino=33 res=1 errno=0 [ 130.980269][ T4959] loop4: detected capacity change from 0 to 2048 [ 131.034775][ T4959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.295850][ T4315] EXT4-fs (loop2): unmounting filesystem. [ 131.370279][ T4968] loop3: detected capacity change from 0 to 2048 [ 131.478068][ T4968] loop3: p1 < > p4 [ 131.498723][ T4968] loop3: p4 size 8388608 extends beyond EOD, truncated [ 131.670539][ T4981] loop2: detected capacity change from 0 to 256 [ 131.761673][ T4981] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 132.526747][ T4976] loop1: detected capacity change from 0 to 2048 [ 132.567845][ T4976] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 132.632209][ T4976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.734804][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741228][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.773887][ T4988] loop0: detected capacity change from 0 to 4096 [ 132.857031][ T4988] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 132.896206][ T4992] loop2: detected capacity change from 0 to 2048 [ 132.923897][ T4996] loop3: detected capacity change from 0 to 256 [ 132.948921][ T4992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.993707][ T4988] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 133.043674][ T27] audit: type=1800 audit(1717509986.845:121): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 133.107293][ T27] audit: type=1800 audit(1717509986.845:122): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 133.188889][ T27] audit: type=1804 audit(1717509986.905:123): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2483286387/syzkaller.KtRG9W/86/bus/bus" dev="loop0" ino=33 res=1 errno=0 [ 133.695312][ T5021] loop0: detected capacity change from 0 to 256 [ 133.833466][ T5021] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 134.748663][ T5032] loop0: detected capacity change from 0 to 2048 [ 134.772706][ T5032] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 134.844215][ T5032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.159483][ T5044] loop4: detected capacity change from 0 to 2048 [ 135.273829][ T5044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.298492][ T5056] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 135.318597][ T5044] ext4 filesystem being mounted at /root/syzkaller-testdir3363029832/syzkaller.ka9X5l/12/file0 supports timestamps until 2038 (0x7fffffff) [ 135.360877][ T3925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.445063][ T5044] syz-executor.4 (5044) used greatest stack depth: 20000 bytes left [ 135.457286][ T4547] EXT4-fs (loop4): unmounting filesystem. [ 135.730907][ T3925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.742021][ T3925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.751876][ T3925] usb 1-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 135.760984][ T3925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.771950][ T3925] usb 1-1: config 0 descriptor?? [ 136.262033][ T3925] wacom 0003:056A:00ED.0005: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.0-1/input0 [ 136.470040][ T3925] usb 1-1: USB disconnect, device number 7 [ 138.675919][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.730453][ T5070] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 138.783298][ T5070] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 138.811048][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.904174][ T5070] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.913584][ T5070] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.922471][ T5070] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.931410][ T5070] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.026971][ T5070] device vxlan0 entered promiscuous mode [ 139.061985][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 139.403967][ T5070] syz-executor.2 (5070) used greatest stack depth: 18776 bytes left [ 139.821206][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 241: 103, using maximum allowed: 30 [ 139.838792][ T5090] loop4: detected capacity change from 0 to 128 [ 139.850027][ T5092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.863321][ T14] usb 1-1: config 0 interface 0 altsetting 241 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 139.900982][ T5093] loop1: detected capacity change from 0 to 256 [ 139.909742][ T5090] FAT-fs (loop4): bogus sectors per cluster 0 [ 139.943625][ T5093] exfat: Bad value for 'uid' [ 139.955236][ T5090] FAT-fs (loop4): Can't find a valid FAT filesystem [ 139.965533][ T14] usb 1-1: config 0 interface 0 altsetting 241 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 140.026688][ T14] usb 1-1: config 0 interface 0 altsetting 241 has 1 endpoint descriptor, different from the interface descriptor's value: 103 [ 140.088752][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.274759][ T14] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 140.299193][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.338019][ T14] usb 1-1: Product: syz [ 140.365653][ T14] usb 1-1: Manufacturer: syz [ 140.385174][ T14] usb 1-1: SerialNumber: syz [ 140.414872][ T14] usb 1-1: config 0 descriptor?? [ 140.452004][ T5063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.521392][ T3567] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.576804][ T5103] loop2: detected capacity change from 0 to 512 [ 140.702477][ T14] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 140.713065][ T14] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 140.758393][ T5110] loop3: detected capacity change from 0 to 24 [ 140.766924][ T14] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 140.806171][ T14] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 140.831883][ T14] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 140.849700][ T5113] (syz-executor.4,5113,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 140.856810][ T14] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 140.898541][ T14] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 140.909538][ T14] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 140.926436][ T14] usb 1-1: USB disconnect, device number 8 [ 140.991638][ T14] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 141.027876][ T14] keyspan 1-1:0.0: device disconnected [ 141.028943][ T5103] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 141.178538][ T5125] 9pnet_fd: Insufficient options for proto=fd [ 141.486079][ T5139] loop3: detected capacity change from 0 to 128 [ 141.518319][ T5139] FAT-fs (loop3): bogus sectors per cluster 0 [ 141.547790][ T5139] FAT-fs (loop3): Can't find a valid FAT filesystem [ 141.659999][ T5145] loop0: detected capacity change from 0 to 256 [ 141.676989][ T5148] loop2: detected capacity change from 0 to 24 [ 141.696332][ T5149] binder: 5147:5149 ioctl c0306201 200001c0 returned -14 [ 141.969443][ T5156] loop0: detected capacity change from 0 to 512 [ 142.033701][ T5156] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 142.238436][ T5168] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.279518][ T5168] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 142.449741][ T5175] binder: 5174:5175 ioctl c0306201 200001c0 returned -14 [ 142.538675][ T5180] loop2: detected capacity change from 0 to 24 [ 142.580110][ T5178] loop3: detected capacity change from 0 to 256 [ 142.829100][ T5191] 9pnet_fd: Insufficient options for proto=fd [ 142.937048][ T5195] loop0: detected capacity change from 0 to 512 [ 142.989930][ T5195] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 143.015072][ T5198] xt_l2tp: v2 sid > 0xffff: 536870912 [ 143.350631][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.380231][ T5212] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 143.395003][ T5211] binder: 5210:5211 ioctl c0306201 200001c0 returned -14 [ 143.404582][ T5212] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 143.437744][ T5212] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.446669][ T5212] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.456431][ T5212] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.465442][ T5212] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.491135][ T5212] device vxlan0 entered promiscuous mode [ 143.651416][ T5219] loop4: detected capacity change from 0 to 256 [ 143.714611][ T3567] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.930116][ T5230] loop4: detected capacity change from 0 to 512 [ 143.965416][ T5230] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 144.029180][ T3567] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.056180][ T5235] xt_l2tp: v2 sid > 0xffff: 536870912 [ 144.230668][ T27] audit: type=1326 audit(1717509998.025:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.262607][ T5241] binder: 5239:5241 ioctl c0306201 200001c0 returned -14 [ 144.310921][ T27] audit: type=1326 audit(1717509998.025:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.416488][ T27] audit: type=1326 audit(1717509998.035:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.523827][ T27] audit: type=1326 audit(1717509998.035:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.578316][ T5258] 9pnet_fd: Insufficient options for proto=fd [ 144.614436][ T27] audit: type=1326 audit(1717509998.035:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.697342][ T27] audit: type=1326 audit(1717509998.035:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.778218][ T27] audit: type=1326 audit(1717509998.035:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.828037][ T27] audit: type=1326 audit(1717509998.035:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.863497][ T5266] loop4: detected capacity change from 0 to 1024 [ 144.900833][ T27] audit: type=1326 audit(1717509998.035:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 144.941025][ T5269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.967944][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.017165][ T27] audit: type=1326 audit(1717509998.035:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7fc00000 [ 145.158183][ T5266] overlayfs: failed to verify upper (/file0, ino=12, err=-116) [ 145.169952][ T5266] overlayfs: failed to verify index dir 'upper' xattr [ 145.177565][ T5266] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 145.198375][ T5275] loop0: detected capacity change from 0 to 128 [ 145.247743][ T5275] FAT-fs (loop0): bogus sectors per cluster 0 [ 145.272459][ T5275] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.287453][ T4547] EXT4-fs (loop4): unmounting filesystem. [ 145.402031][ T5276] loop3: detected capacity change from 0 to 2048 [ 145.455274][ T5276] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 145.478018][ T5276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.947897][ T5300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.107615][ T5310] loop1: detected capacity change from 0 to 128 [ 146.127769][ T5311] loop3: detected capacity change from 0 to 128 [ 146.175050][ T5311] FAT-fs (loop3): bogus sectors per cluster 0 [ 146.222434][ T5311] FAT-fs (loop3): Can't find a valid FAT filesystem [ 146.255178][ T5313] loop0: detected capacity change from 0 to 2048 [ 146.281782][ T5315] loop1: detected capacity change from 0 to 256 [ 146.302304][ T3591] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.324444][ T5313] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 146.326889][ T5315] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 146.405398][ T5313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.943840][ T5341] loop4: detected capacity change from 0 to 128 [ 146.974773][ T5343] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 147.007743][ T5345] ptrace attach of "/root/syz-executor.0 exec"[3584] was attempted by ""[5345] [ 147.082115][ T5347] loop1: detected capacity change from 0 to 256 [ 147.202135][ T5347] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 147.257853][ T5353] xt_l2tp: v2 sid > 0xffff: 536870912 [ 147.281647][ T5349] loop3: detected capacity change from 0 to 2048 [ 147.332963][ T5349] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 147.369858][ T5349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.578372][ T5366] loop4: detected capacity change from 0 to 164 [ 147.765302][ T5379] loop4: detected capacity change from 0 to 1024 [ 147.774106][ T5381] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 147.836325][ T5379] hfsplus: request for non-existent node 3 in B*Tree [ 147.871752][ T5383] loop3: detected capacity change from 0 to 2048 [ 147.880906][ T5379] hfsplus: request for non-existent node 3 in B*Tree [ 147.983622][ T5383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.247279][ T4414] EXT4-fs (loop3): unmounting filesystem. [ 149.642388][ T5414] loop0: detected capacity change from 0 to 2048 [ 149.845598][ T5423] loop3: detected capacity change from 0 to 2048 [ 149.909663][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 149.909680][ T27] audit: type=1326 audit(1717510003.705:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f259167cee9 code=0x0 [ 149.955270][ T5429] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.006222][ T5378] loop2: detected capacity change from 0 to 32768 [ 150.017560][ T5430] loop0: detected capacity change from 0 to 2048 [ 150.108093][ T5426] loop1: detected capacity change from 0 to 4096 [ 150.133518][ T5426] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 150.171841][ T5440] ptrace attach of "/root/syz-executor.3 exec"[4414] was attempted by ""[5440] [ 150.184888][ T5430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.194654][ T5378] XFS (loop2): Mounting V5 Filesystem [ 151.302931][ T5378] XFS (loop2): Ending clean mount [ 151.339733][ T3584] EXT4-fs (loop0): unmounting filesystem. [ 151.387867][ T4315] XFS (loop2): Unmounting Filesystem [ 151.640588][ T5466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.703599][ T5470] ptrace attach of "/root/syz-executor.1 exec"[4055] was attempted by ""[5470] [ 151.723462][ T5472] loop4: detected capacity change from 0 to 1024 [ 151.850398][ T5472] hfsplus: invalid extended attribute record [ 151.988873][ T3983] hfsplus: b-tree write err: -5, ino 4 [ 152.158325][ T5482] sp0: Synchronizing with TNC [ 152.170143][ T27] audit: type=1326 audit(1717510005.965:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f259167cee9 code=0x0 [ 152.188010][ T5486] loop1: detected capacity change from 0 to 2048 [ 152.271326][ T5486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.788031][ T5499] loop3: detected capacity change from 0 to 2048 [ 153.974381][ T5498] sched: RT throttling activated [ 155.058861][ T5499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.378794][ T4055] EXT4-fs (loop1): unmounting filesystem. [ 155.417514][ T5508] loop4: detected capacity change from 0 to 512 [ 155.568713][ T5509] loop3: detected capacity change from 0 to 2048 [ 155.572638][ T5508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.596523][ T5508] ext4 filesystem being mounted at /root/syzkaller-testdir3363029832/syzkaller.ka9X5l/45/bus supports timestamps until 2038 (0x7fffffff) [ 155.637098][ T5519] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.782801][ T5523] loop2: detected capacity change from 0 to 1024 [ 155.834357][ T5526] loop0: detected capacity change from 0 to 164 [ 155.870585][ T5523] hfsplus: invalid extended attribute record [ 155.925129][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.929536][ T4547] EXT4-fs (loop4): unmounting filesystem. [ 155.948660][ T27] audit: type=1326 audit(1717510009.745:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5216a7cee9 code=0x0 [ 156.005828][ T3983] hfsplus: b-tree write err: -5, ino 4 [ 156.038777][ T5532] loop0: detected capacity change from 0 to 1024 [ 156.149754][ T5532] hfsplus: request for non-existent node 3 in B*Tree [ 156.171879][ T5532] hfsplus: request for non-existent node 3 in B*Tree [ 156.330483][ T27] audit: type=1326 audit(1717510010.125:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.399976][ T27] audit: type=1326 audit(1717510010.155:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.494429][ T27] audit: type=1326 audit(1717510010.155:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.584848][ T27] audit: type=1326 audit(1717510010.155:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.668043][ T27] audit: type=1326 audit(1717510010.155:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.698976][ T27] audit: type=1326 audit(1717510010.155:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.854784][ T27] audit: type=1326 audit(1717510010.165:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 156.925210][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.949219][ T27] audit: type=1326 audit(1717510010.165:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 157.038101][ T27] audit: type=1326 audit(1717510010.165:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff06727cee9 code=0x7ffc0000 [ 157.649758][ T5586] loop4: detected capacity change from 0 to 8 [ 157.677804][ T5586] squashfs image failed sanity check [ 157.850377][ T5539] loop1: detected capacity change from 0 to 32768 [ 157.891139][ T151] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.912190][ T3567] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.125726][ T5562] loop3: detected capacity change from 0 to 32768 [ 158.140911][ T151] usb 3-1: Using ep0 maxpacket: 8 [ 158.143055][ T5562] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5562) [ 158.261045][ T151] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 158.269299][ T151] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.281115][ T5562] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.322342][ T151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.336809][ T5562] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.368356][ T151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.395898][ T5562] BTRFS info (device loop3): using free space tree [ 158.414599][ T151] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.455555][ T151] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.485320][ T151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.718717][ T5562] BTRFS info (device loop3): enabling ssd optimizations [ 158.791016][ T151] usb 3-1: usb_control_msg returned -32 [ 158.796656][ T151] usbtmc 3-1:16.0: can't read capabilities [ 158.829140][ T4414] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.111948][ T5638] loop0: detected capacity change from 0 to 8 [ 159.154988][ T5638] squashfs image failed sanity check [ 159.326214][ T5646] Invalid ELF header type: 0 != 1 [ 159.561186][ T5653] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 159.736945][ T4487] usb 3-1: USB disconnect, device number 4 [ 159.837522][ T5662] sp0: Synchronizing with TNC [ 160.106390][ T5671] Bluetooth: MGMT ver 1.22 [ 160.503349][ T5688] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 160.534722][ T5651] loop4: detected capacity change from 0 to 32768 [ 160.584056][ T3567] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.678627][ T5692] loop1: detected capacity change from 0 to 512 [ 160.776610][ T5692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.791123][ T5692] ext4 filesystem being mounted at /root/syzkaller-testdir2599607269/syzkaller.R4Kv1o/102/bus supports timestamps until 2038 (0x7fffffff) [ 160.823260][ T5689] dccp_close: ABORT with 124 bytes unread [ 161.074971][ T4055] EXT4-fs (loop1): unmounting filesystem. [ 161.733286][ T5737] xt_connbytes: Forcing CT accounting to be enabled [ 161.756138][ T5737] Cannot find add_set index 0 as target [ 161.914614][ T5740] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 162.447440][ T5714] loop3: detected capacity change from 0 to 32768 [ 162.564142][ T5714] XFS (loop3): Mounting V5 Filesystem [ 162.643863][ T5714] XFS (loop3): Ending clean mount [ 162.659202][ T5714] XFS (loop3): Quotacheck needed: Please wait. [ 162.759969][ T5733] loop0: detected capacity change from 0 to 32768 [ 162.785635][ T5714] XFS (loop3): Quotacheck: Done. [ 162.804775][ T5733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5733) [ 162.848971][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 162.848988][ T27] audit: type=1800 audit(1717510016.645:238): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=4423 res=0 errno=0 [ 162.957832][ T5733] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.975476][ T5733] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 162.985041][ T5733] BTRFS info (device loop0): using free space tree [ 163.166023][ T4414] XFS (loop3): Unmounting Filesystem [ 163.267410][ T5733] BTRFS info (device loop0): enabling ssd optimizations [ 163.397879][ T5741] loop1: detected capacity change from 0 to 32768 [ 163.481283][ T3584] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.696883][ T3588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.728753][ T3588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.758952][ T3588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.783145][ T3583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.792604][ T3583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.800014][ T3583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.865115][ T5788] loop2: detected capacity change from 0 to 4096 [ 164.421672][ T3602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.454380][ T5802] loop2: detected capacity change from 0 to 16 [ 164.541041][ T5802] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.683512][ T3602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.832838][ T3602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.894889][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 164.967839][ T3602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.103748][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.152819][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.192045][ T5789] device bridge_slave_0 entered promiscuous mode [ 165.244243][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.252713][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.272278][ T5789] device bridge_slave_1 entered promiscuous mode [ 165.391311][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.443766][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.642143][ T5789] team0: Port device team_slave_0 added [ 165.663725][ T5789] team0: Port device team_slave_1 added [ 165.771307][ T5820] loop3: detected capacity change from 0 to 32768 [ 165.792479][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.799485][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.931235][ T3583] Bluetooth: hci5: command tx timeout [ 165.955964][ T5848] loop1: detected capacity change from 0 to 16 [ 165.964460][ T5820] XFS (loop3): Mounting V5 Filesystem [ 165.969391][ T5848] erofs: (device loop1): mounted with root inode @ nid 36. [ 166.024711][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.123258][ T5820] XFS (loop3): Ending clean mount [ 166.171399][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.178417][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.381640][ T4414] XFS (loop3): Unmounting Filesystem [ 166.390123][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.678995][ T5872] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.725114][ T5789] device hsr_slave_0 entered promiscuous mode [ 166.747028][ T5789] device hsr_slave_1 entered promiscuous mode [ 166.920995][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.048478][ T5882] loop1: detected capacity change from 0 to 64 [ 167.191566][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 167.312880][ T14] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 167.332994][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.387348][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.429130][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.452262][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.466456][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.476141][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.566753][ T5890] IPVS: Unknown mcast interface: pim6reg [ 167.740998][ T14] usb 3-1: usb_control_msg returned -32 [ 167.746681][ T14] usbtmc 3-1:16.0: can't read capabilities [ 167.775399][ T3602] device hsr_slave_0 left promiscuous mode [ 167.814807][ T3602] device hsr_slave_1 left promiscuous mode [ 167.857753][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.885353][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.912287][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.940439][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.954013][ T3602] device bridge_slave_1 left promiscuous mode [ 167.962418][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.005781][ T3602] device bridge_slave_0 left promiscuous mode [ 168.017792][ T3583] Bluetooth: hci5: command tx timeout [ 168.023507][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.088521][ T3602] device veth1_macvtap left promiscuous mode [ 168.107396][ T3602] device veth0_macvtap left promiscuous mode [ 168.119908][ T3602] device veth1_vlan left promiscuous mode [ 168.139849][ T3602] device veth0_vlan left promiscuous mode [ 168.571888][ T5924] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 168.723199][ T3925] usb 3-1: USB disconnect, device number 5 [ 168.888630][ T3602] team0 (unregistering): Port device team_slave_1 removed [ 168.928335][ T3602] team0 (unregistering): Port device team_slave_0 removed [ 168.957787][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.986410][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.118326][ T3602] bond0 (unregistering): Released all slaves [ 169.609965][ T5942] loop3: detected capacity change from 0 to 1764 [ 169.755163][ T5942] ISOFS: unable to read i-node block [ 169.806376][ T5942] isofs_fill_super: get root inode failed [ 169.842948][ T5789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.867181][ T5789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.928954][ T5789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.037854][ T5935] loop0: detected capacity change from 0 to 32768 [ 170.090860][ T3583] Bluetooth: hci5: command tx timeout [ 170.097039][ T5789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.165022][ T3567] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.236470][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.298149][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.319876][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.359942][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.418432][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.462288][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.489604][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.496823][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.633479][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.653792][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.701753][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.710395][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.717609][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.816806][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.842298][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.931892][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.968817][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.992404][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.045617][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.053806][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.092114][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.119658][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.164147][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.189968][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.244656][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.259595][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.300189][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.308892][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 171.431231][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 171.440034][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.470423][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.499666][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.565828][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.620521][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.658575][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.950881][ T14] usb 2-1: usb_control_msg returned -32 [ 171.956617][ T14] usbtmc 2-1:16.0: can't read capabilities [ 172.021911][ T6022] usb usb9: usbfs: process 6022 (syz-executor.0) did not claim interface 0 before use [ 172.170906][ T3583] Bluetooth: hci5: command tx timeout [ 172.376550][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.392810][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.425862][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.741286][ T6045] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 172.902931][ T4772] usb 2-1: USB disconnect, device number 6 [ 173.058847][ T6056] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 173.452128][ T6065] loop3: detected capacity change from 0 to 512 [ 173.569259][ T6065] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 173.634131][ T6065] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.3: missing EA_INODE flag [ 173.672581][ T6065] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 2 err=-117 [ 173.743635][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.763169][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.764722][ T6065] EXT4-fs (loop3): 1 orphan inode deleted [ 173.798443][ T5789] device veth0_vlan entered promiscuous mode [ 173.804818][ T6065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.817040][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.832719][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.034668][ T5789] device veth1_vlan entered promiscuous mode [ 174.042505][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.052213][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.060236][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.887922][ T4414] EXT4-fs (loop3): unmounting filesystem. [ 175.088244][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.098378][ T6100] usb usb9: usbfs: process 6100 (syz-executor.3) did not claim interface 0 before use [ 175.157722][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.205212][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.237616][ T6106] loop0: detected capacity change from 0 to 16 [ 175.262579][ T6106] erofs: (device loop0): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 175.288563][ T5789] device veth0_macvtap entered promiscuous mode [ 175.336142][ T5789] device veth1_macvtap entered promiscuous mode [ 175.460930][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.490251][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.533201][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.576139][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.625913][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.677115][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.728085][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.760852][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.830241][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.558483][ T6147] loop3: detected capacity change from 0 to 16 [ 176.569445][ T6147] erofs: (device loop3): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 186.022017][ T3589] Bluetooth: hci3: command 0x0406 tx timeout [ 194.172908][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179357][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.895652][ T3588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.911498][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.924679][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.934069][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.940996][ T3588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.950291][ T3582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.958168][ T3588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.962516][ T3582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.976889][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.984587][ T3590] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.985098][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.999191][ T3582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.285914][ T3583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.298774][ T3583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.307958][ T3583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.316606][ T3583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.326566][ T3583] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 206.336160][ T3583] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.940634][ T3589] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 206.953001][ T3589] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 206.962301][ T3589] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 206.970213][ T3589] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 206.978937][ T3589] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 206.986305][ T3589] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 208.091079][ T3589] Bluetooth: hci6: command tx timeout [ 208.097979][ T3589] Bluetooth: hci2: command tx timeout [ 208.411028][ T3589] Bluetooth: hci7: command tx timeout [ 209.052863][ T3589] Bluetooth: hci8: command tx timeout [ 210.170889][ T3583] Bluetooth: hci2: command tx timeout [ 210.176432][ T3583] Bluetooth: hci6: command tx timeout [ 210.490829][ T3583] Bluetooth: hci7: command tx timeout [ 211.131304][ T3583] Bluetooth: hci8: command tx timeout [ 211.610830][ T3583] Bluetooth: hci1: command 0x0406 tx timeout [ 212.250995][ T3583] Bluetooth: hci6: command tx timeout [ 212.256743][ T3583] Bluetooth: hci2: command tx timeout [ 212.570862][ T3583] Bluetooth: hci7: command tx timeout [ 213.210959][ T3583] Bluetooth: hci8: command tx timeout [ 214.330910][ T3583] Bluetooth: hci2: command tx timeout [ 214.336483][ T3583] Bluetooth: hci6: command tx timeout [ 214.653561][ T3583] Bluetooth: hci7: command tx timeout [ 215.291693][ T3583] Bluetooth: hci8: command tx timeout [ 226.971063][ T3589] Bluetooth: hci4: command 0x0406 tx timeout [ 228.454547][ T3583] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 228.467764][ T3583] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 228.478857][ T3583] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 228.495930][ T3583] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 228.503755][ T3583] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 228.511229][ T3582] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 230.571713][ T3582] Bluetooth: hci9: command tx timeout [ 232.090979][ T3582] Bluetooth: hci0: command 0x0406 tx timeout [ 232.650822][ T3583] Bluetooth: hci9: command tx timeout [ 234.730865][ T3583] Bluetooth: hci9: command tx timeout [ 236.810827][ T3583] Bluetooth: hci9: command tx timeout [ 255.612808][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.619352][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.171108][ T3589] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 271.186555][ T3589] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 271.196095][ T3589] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 271.205629][ T3589] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 271.213663][ T3589] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 271.221354][ T3589] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 271.272993][ T3589] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 271.285762][ T3589] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 271.295342][ T3589] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 271.316058][ T3589] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 271.323992][ T3589] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 271.341376][ T3589] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 271.620153][ T3583] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 271.639106][ T3583] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 271.648055][ T3583] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 271.662344][ T3583] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 271.670045][ T3583] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 271.681249][ T3583] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 271.923937][ T3583] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 271.935683][ T3583] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 271.944907][ T3583] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 271.956488][ T3583] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 271.966312][ T3583] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 271.974631][ T3583] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 273.291031][ T3589] Bluetooth: hci10: command tx timeout [ 273.370966][ T3589] Bluetooth: hci11: command tx timeout [ 273.770944][ T3589] Bluetooth: hci12: command tx timeout [ 274.010984][ T3589] Bluetooth: hci13: command tx timeout [ 275.371000][ T3589] Bluetooth: hci10: command tx timeout [ 275.450906][ T3589] Bluetooth: hci11: command tx timeout [ 275.850791][ T3589] Bluetooth: hci12: command tx timeout [ 276.093988][ T3589] Bluetooth: hci13: command tx timeout [ 277.450906][ T3589] Bluetooth: hci10: command tx timeout [ 277.530832][ T3589] Bluetooth: hci11: command tx timeout [ 277.930780][ T3589] Bluetooth: hci12: command tx timeout [ 278.181043][ T3589] Bluetooth: hci13: command tx timeout [ 279.540856][ T3589] Bluetooth: hci10: command tx timeout [ 279.610924][ T3589] Bluetooth: hci11: command tx timeout [ 280.010892][ T3582] Bluetooth: hci12: command tx timeout [ 280.260987][ T3589] Bluetooth: hci13: command tx timeout [ 288.420636][ T3582] Bluetooth: hci5: command 0x0406 tx timeout [ 293.486093][ T3589] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 293.498209][ T3589] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 293.509489][ T3589] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 293.517737][ T3589] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 293.526577][ T3589] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 293.534223][ T3589] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 295.610910][ T3589] Bluetooth: hci14: command tx timeout [ 297.690875][ T3589] Bluetooth: hci14: command tx timeout [ 299.770849][ T3589] Bluetooth: hci14: command tx timeout [ 301.860819][ T3589] Bluetooth: hci14: command tx timeout [ 317.056553][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.063056][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.090841][ T28] INFO: task kworker/1:0:22 blocked for more than 143 seconds. [ 324.098517][ T28] Not tainted 6.1.92-syzkaller #0 2024/06/04 14:09:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 324.133332][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.197993][ T28] task:kworker/1:0 state:D stack:23704 pid:22 ppid:2 flags:0x00004000 [ 324.220712][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 324.226828][ T28] Call Trace: [ 324.230135][ T28] [ 324.240818][ T28] __schedule+0x142d/0x4550 [ 324.250851][ T28] ? __sched_text_start+0x8/0x8 [ 324.255798][ T28] ? print_irqtrace_events+0x210/0x210 [ 324.280727][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 324.286004][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 324.300701][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 324.305967][ T28] schedule+0xbf/0x180 [ 324.310085][ T28] schedule_preempt_disabled+0xf/0x20 [ 324.330773][ T28] __mutex_lock+0x6b9/0xd80 [ 324.335361][ T28] ? __mutex_lock+0x53c/0xd80 [ 324.340076][ T28] ? addrconf_dad_work+0xcc/0x16b0 [ 324.360887][ T28] ? mutex_lock_nested+0x10/0x10 [ 324.366037][ T28] addrconf_dad_work+0xcc/0x16b0 [ 324.390416][ T28] ? read_lock_is_recursive+0x10/0x10 [ 324.396320][ T28] ? ipv6_get_saddr_eval+0xe90/0xe90 [ 324.410803][ T28] ? print_irqtrace_events+0x210/0x210 [ 324.416328][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 324.432092][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 324.437360][ T28] ? process_one_work+0x7a9/0x11d0 [ 324.450766][ T28] process_one_work+0x8a9/0x11d0 [ 324.455787][ T28] ? worker_detach_from_pool+0x260/0x260 [ 324.480744][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 324.486364][ T28] ? kthread_data+0x4e/0xc0 [ 324.500754][ T28] ? wq_worker_running+0x97/0x190 [ 324.505872][ T28] worker_thread+0xa47/0x1200 [ 324.510608][ T28] kthread+0x28d/0x320 [ 324.514838][ T28] ? worker_clr_flags+0x190/0x190 [ 324.519908][ T28] ? kthread_blkcg+0xd0/0xd0 [ 324.524603][ T28] ret_from_fork+0x1f/0x30 [ 324.529072][ T28] [ 324.532365][ T28] INFO: task kworker/u4:5:3602 blocked for more than 143 seconds. [ 324.540200][ T28] Not tainted 6.1.92-syzkaller #0 [ 324.547170][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.556093][ T28] task:kworker/u4:5 state:D stack:21112 pid:3602 ppid:2 flags:0x00004000 [ 324.566288][ T28] Workqueue: netns cleanup_net [ 324.571223][ T28] Call Trace: [ 324.574524][ T28] [ 324.577477][ T28] __schedule+0x142d/0x4550 [ 324.582156][ T28] ? __mutex_lock+0x6b4/0xd80 [ 324.586878][ T28] ? __sched_text_start+0x8/0x8 [ 324.600729][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 324.606421][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 324.620784][ T28] schedule+0xbf/0x180 [ 324.624940][ T28] schedule_preempt_disabled+0xf/0x20 [ 324.630364][ T28] __mutex_lock+0x6b9/0xd80 [ 324.652465][ T28] ? __mutex_lock+0x53c/0xd80 [ 324.657229][ T28] ? fib6_rules_net_exit_batch+0x1c/0xc0 [ 324.690791][ T28] ? mutex_lock_nested+0x10/0x10 [ 324.695812][ T28] ? proc_set_user+0x90/0x90 [ 324.700957][ T28