last executing test programs: 6.396980792s ago: executing program 0 (id=826): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0xfffffffffffffce2}}) close(0x3) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @empty}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x2, @local, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c61"], 0x68}}, 0x0) socket$kcm(0x10, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f0000000340)=0x9, 0x4) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) write$binfmt_elf64(r7, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r1, @ANYRES64], 0xffffff34) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYRES16=r10, @ANYRES8=r0, @ANYRESHEX=r8], 0x0) bind$rds(r9, &(0x7f0000000040)={0xa, 0x4e20, @remote}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000000)=0x200) 5.560572052s ago: executing program 2 (id=841): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/192, 0xc0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000940)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$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") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x4000801) syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0xde, 0xf1, 0x98, 0x40, 0x8750, 0xb9af, 0xa361, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0xa5c1669986f045a4, 0x4c, [{{0x9, 0x4, 0x9c, 0x2b, 0x0, 0xef, 0x4, 0x1, 0x5, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7f, 0xfa}]}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@private0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x750f1c3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a317fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8]}, 0x45c) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) dup(r3) r4 = socket$inet(0x2, 0x3, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xc}, {0x8, 0x2}, {0x8}]}}]}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x541b, &(0x7f0000000080)={'wlan1\x00'}) 4.143940397s ago: executing program 0 (id=854): r0 = syz_usb_connect$cdc_ncm(0x5, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026f0002010000000904000001020d0000052406000105240001000d240f0100000000000000000006241a0000000724140100000008241c0800e8d9000424020f090581030002ff00000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x80, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket(0x22, 0xa, 0x72f27b42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) 3.456854864s ago: executing program 1 (id=866): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0xfffffffffffffce2}}) close(0x3) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @empty}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x2, @local, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c61"], 0x68}}, 0x0) socket$kcm(0x10, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f0000000340)=0x9, 0x4) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) write$binfmt_elf64(r7, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r1, @ANYRES64], 0xffffff34) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYRES16=r10, @ANYRES8=r0, @ANYRESHEX=r8], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000000)=0x200) 3.423493507s ago: executing program 3 (id=867): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 3.339971739s ago: executing program 3 (id=868): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x6, 0x2, 0x1a00, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) 3.339835245s ago: executing program 3 (id=869): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x4, 0x3, 0x1) 3.319785521s ago: executing program 3 (id=870): kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x8}], 0x0) 3.270187431s ago: executing program 3 (id=871): r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 3.155734404s ago: executing program 3 (id=872): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1208000, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x21, 0x9e80, &(0x7f000000fcc0)="$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") socket$netlink(0x10, 0x3, 0x9) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file2\x00') 2.729875284s ago: executing program 1 (id=873): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x7fff, 0x4) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x4000000000000aa, 0x0) 2.659298657s ago: executing program 1 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.456294698s ago: executing program 2 (id=876): socket$inet_smc(0x2b, 0x1, 0x0) capset(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$user(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0xffffffffffffffff, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x60ba, 0xced3, "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", 0x1, 0x1f, 0xf3, 0x86, 0x8, 0x80, 0x4}}}, 0x120) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040f0454001904"], 0x7) 2.406868755s ago: executing program 4 (id=877): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="9feb"], 0x0, 0x2a}, 0x20) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 2.343996266s ago: executing program 2 (id=878): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 2.330469898s ago: executing program 2 (id=879): mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f00000001c0)) 2.103637459s ago: executing program 4 (id=880): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 1.412057351s ago: executing program 4 (id=881): r0 = socket(0x2a, 0x2, 0x0) accept$inet6(r0, 0x0, 0x0) 1.411769859s ago: executing program 1 (id=882): r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 1.411501944s ago: executing program 2 (id=883): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0xfffffffffffffce2}}) close(0x3) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @empty}, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x2, @local, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c61"], 0x68}}, 0x0) socket$kcm(0x10, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f0000000340)=0x9, 0x4) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) write$binfmt_elf64(r7, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES16=r6, @ANYRESOCT=r1, @ANYRES64], 0xffffff34) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYRES16=r10, @ANYRES8=r0, @ANYRESHEX=r8], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000000)=0x200) 1.338006719s ago: executing program 4 (id=884): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x7fff, 0x4) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x4000000000000aa, 0x0) 1.267803547s ago: executing program 1 (id=885): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000000c0)="751a75bb0a955bacea01e7eeb9d7327867", 0x11}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.263716779s ago: executing program 4 (id=886): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/192, 0xc0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000940)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$eJzs3UFvG1kdAPD/OHGbtClJBYdSiVLRoqSC2klD24hDAQnBqRJQ7iUkThTFiaPYaZuoglR8ACSEAIkTJy5IfAAk1I+AkCrBfbW72tVqt9097GG3Xnlsd9PUbhLVsaP495Om897M2P//c+Nnv5knTwB962JEXIuI59VqtVYfbWzPNJZIImK7ftyzpw/naksS1eqdD5N0V61eO2xix3Oerj8khiLiFz+N+HXyatzy5tbybLFYWG/U85WVtXx5c+vq0srsYmGxsDo9PXVj5ubM9ZnJjrRzJCJu/fjdP/3+7z+59e/v3n/r7vsTv0ka22NHOzqt3vRs+lo0DUbE+mEE64GBRnuyvU4EAIB9aX7P/1ZEXInRGEi/zQEAAADHSfUHI/FZElFtYajl1pedbLdjaO/HAgAAAN2RSefAJplcYx7ASGQyuVx9Du/X4lSmWCpXvrNQ2lidr8+VHYtsZmGpWJhszBUei2xSq0+l5S/r13bVpyPibET8cXR4OJaKhdxcqTjf65MfAAAA0CdO7xr/fzJaH/8DAAAAx8xYrxMAAAAADp3xPwAAABx/xv8AAABwrP3s9u3aUm3e/3r+3ubGcune1flCeTm3sjGXmyutr+UWS6XF9Df7VvZ6vmKptPa9WN14kK8UypV8eXPr7kppY7Vyd+mlW2ADAAAAXXT2m4//n0TE9veH06XmRK+TArpi8CAHv3N4eQDdN9DrBICeOdDnP3CsZHudANBzyR77207e+U/ncwEAAA7H+NdbX/9P9jw3sJ3pUorAIXH+D/qX6//Qv1z/h/6VjYEwkIf+dvjX/6vVAyUEAAB03Ei6JJlcRHoeYCQymVwu4kx6W4BssrBULExGxFci4n+j2ZO1+lT6yGTPMQMAAAAAAAAAAAAAAAAAAAAAAAAAUFetJlEFAAAAjrWIzHtJ4/5f46OXR3afHziRfDqariPi/l/v/PnBbKWyPlXb/tGL7ZW/NLZf68UZDAAAAGC35ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE569vThXHPpZtwPfhQRY63iD8ZQuh6KwYg49XGSrpuSiBjoQPztRxFxrlX8pJZWjDWyaBV/uIfxMxFxugPxoZ89rvU/P2z1/svExXTd+v13I+2h3lzb/i9pHjGU9nOt+p8z+4xx/sk/823jP4o4P9i6/2n2v0mb+Jf2Gf9Xv9zaarev+reI8ZafP8lLsfKVlbV8eXPr6tLK7GJhsbA6PT11Y+bmzPWZyfzCUrHQ+HdHl3zxRekP3/jX89e1/1Sb+GN7tP/yPtv/+ZMHT79aL2ZbxZ+41Prv71yb+JnGZ9+3G+Xa/vFmebte3unCP/574XXtn6+3f/Cg//8T+2z/lZ//7u19HgoAdEF5c2t5tlgsrPd14Y1ejdrXoiPRisMsDMeRSKPDhd8ejTSOZKG3/RIAANB5r46BAQAAAAAAAAAAAAAAAAAAgG7r5q/rNW33pqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK/1RQAAAP//2jzOsg==") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x4000801) syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0xde, 0xf1, 0x98, 0x40, 0x8750, 0xb9af, 0xa361, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0xa5c1669986f045a4, 0x4c, [{{0x9, 0x4, 0x9c, 0x2b, 0x0, 0xef, 0x4, 0x1, 0x5, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7f, 0xfa}]}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@private0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x750f1c3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a317fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8]}, 0x45c) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0) dup(r3) socket$inet(0x2, 0x3, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xc}, {0x8, 0x2}, {0x8}]}}]}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 995.79741ms ago: executing program 0 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 994.836806ms ago: executing program 0 (id=888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0), 0x1) 903.993344ms ago: executing program 0 (id=889): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) 903.648575ms ago: executing program 0 (id=890): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_names\x00') syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4000) pread64(r5, &(0x7f0000000600)=""/9, 0x9, 0x9) syslog(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 68.223406ms ago: executing program 1 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 59.713934ms ago: executing program 2 (id=892): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=893): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@multicast2}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) kernel console output (not intermixed with test programs): 512). [ 163.827640][ T7238] xfs: Unknown parameter 'dont_appraise' [ 163.845549][ T7268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 163.947066][ T7258] loop1: detected capacity change from 0 to 32768 [ 163.985588][ T7275] loop2: detected capacity change from 0 to 128 [ 163.986797][ T7258] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 164.001972][ T7258] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.103735][ T7258] XFS (loop1): Ending clean mount [ 164.109774][ T7258] XFS (loop1): Quotacheck needed: Please wait. [ 164.165354][ T7258] XFS (loop1): Quotacheck: Done. [ 164.298916][ T6958] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.982184][ T7295] loop3: detected capacity change from 0 to 1024 [ 164.984812][ T7295] hfsplus: unable to parse mount options [ 165.031353][ T7290] loop4: detected capacity change from 0 to 32768 [ 165.049234][ T7302] loop2: detected capacity change from 0 to 256 [ 165.056290][ T7290] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.087746][ T7302] FAULT_INJECTION: forcing a failure. [ 165.087746][ T7302] name failslab, interval 1, probability 0, space 0, times 0 [ 165.103124][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.2.147 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 165.105940][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 165.108636][ T7302] Call trace: [ 165.109576][ T7302] dump_backtrace+0x1b8/0x1e4 [ 165.110820][ T7302] show_stack+0x2c/0x3c [ 165.111965][ T7302] dump_stack_lvl+0xe4/0x150 [ 165.112642][ T7290] XFS (loop4): Ending clean mount [ 165.113178][ T7302] dump_stack+0x1c/0x28 [ 165.115651][ T7302] should_fail_ex+0x3b0/0x50c [ 165.116906][ T7302] should_failslab+0xc8/0x130 [ 165.118229][ T7302] kmem_cache_alloc_noprof+0x84/0x350 [ 165.119775][ T7302] security_file_alloc+0x30/0x124 [ 165.121129][ T7302] init_file+0x90/0x1f8 [ 165.122284][ T7302] alloc_empty_file+0xc0/0x1d4 [ 165.123598][ T7302] path_openat+0xd0/0x29f8 [ 165.124812][ T7302] do_filp_open+0x1bc/0x3cc [ 165.126071][ T7302] do_sys_openat2+0x124/0x1b8 [ 165.127391][ T7302] __arm64_sys_openat+0x1f0/0x240 [ 165.128770][ T7302] invoke_syscall+0x98/0x2b8 [ 165.130140][ T7302] el0_svc_common+0x130/0x23c [ 165.131608][ T7302] do_el0_svc+0x48/0x58 [ 165.132942][ T7302] el0_svc+0x54/0x168 [ 165.134065][ T7302] el0t_64_sync_handler+0x84/0xfc [ 165.135495][ T7302] el0t_64_sync+0x190/0x194 [ 165.137381][ T7290] XFS (loop4): Quotacheck needed: Please wait. [ 165.154521][ T7312] Zero length message leads to an empty skb [ 165.173969][ T7290] XFS (loop4): Quotacheck: Done. [ 165.261433][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 165.264152][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 165.318542][ T7321] loop1: detected capacity change from 0 to 128 [ 165.396108][ T7324] loop2: detected capacity change from 0 to 4096 [ 165.399046][ T7324] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 165.452096][ T6672] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.689569][ T7342] loop1: detected capacity change from 0 to 128 [ 165.699772][ T7340] loop4: detected capacity change from 0 to 4096 [ 165.703787][ T7340] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 165.731898][ T7340] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.810971][ T7345] loop1: detected capacity change from 0 to 256 [ 165.822810][ T7345] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 165.873318][ T7348] loop3: detected capacity change from 0 to 128 [ 165.971700][ T7357] loop4: detected capacity change from 0 to 128 [ 165.974154][ T7357] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.143147][ T7369] loop3: detected capacity change from 0 to 1024 [ 166.225920][ T7371] loop4: detected capacity change from 0 to 4096 [ 166.246322][ T7371] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 166.262596][ T7375] fuse: Unknown parameter 'grïup_id' [ 166.285165][ T7371] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 166.293815][ T7377] loop2: detected capacity change from 0 to 128 [ 166.365958][ T7378] libceph: resolve 'c' (ret=-3): failed [ 166.369356][ T44] hfsplus: b-tree write err: -5, ino 4 [ 166.470967][ T7388] binder: 7387:7388 ioctl c06864b8 20000280 returned -22 [ 166.475992][ T7388] binder: 7387:7388 tried to acquire reference to desc 0, got 1 instead [ 166.484545][ T7388] binder: 7387:7388 got transaction with invalid parent offset or type [ 166.497586][ T7388] binder: 7387:7388 transaction call to 7387:0 failed 16/29201/-22, size 80-24 line 3540 [ 166.517065][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.531673][ T7391] loop0: detected capacity change from 0 to 2048 [ 166.543893][ T7391] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 166.553656][ T7391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.576040][ T7403] loop1: detected capacity change from 0 to 16 [ 166.589754][ T7403] cramfs: Unknown parameter '01777777777777777777777º³¼±”v¹L^›ïŸGÿ虵ÖØä¼us6 õ”¹î­¼†”¦L•L€²eU#/ÌÛè]ÕJ'm¹÷Bž½˜Û9æÏ [ 166.589754][ T7403] ÊmÉMáKŒ$2¢SDñ‰À¬Å?Z¾Qõ‘ÈÇ–»é– *µ²"·a$ v¾Þ½ßôEcŒûæKô¿ž•fñWV' [ 166.601254][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 166.625360][ T7405] xt_limit: Overflow, try lower: 33554432/384 [ 166.669960][ T7408] loop2: detected capacity change from 0 to 1024 [ 166.784490][ T1925] hfsplus: b-tree write err: -5, ino 4 [ 167.841053][ T7423] loop2: detected capacity change from 0 to 32768 [ 167.845167][ T7423] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 167.845167][ T7423] [ 167.858382][ T7423] xtLookup: xtSearch returned -5 [ 167.859772][ T7423] read_mapping_page failed! [ 167.861042][ T7423] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 167.863023][ T7423] Mount JFS Failure: -5 [ 167.864130][ T7423] jfs_mount failed w/return code = -5 [ 167.984543][ T7449] loop0: detected capacity change from 0 to 256 [ 167.994276][ T7450] loop4: detected capacity change from 0 to 1024 [ 168.003323][ T7449] FAULT_INJECTION: forcing a failure. [ 168.003323][ T7449] name failslab, interval 1, probability 0, space 0, times 0 [ 168.017175][ T7449] CPU: 1 UID: 0 PID: 7449 Comm: syz.0.207 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 168.019855][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 168.022651][ T7449] Call trace: [ 168.023515][ T7449] dump_backtrace+0x1b8/0x1e4 [ 168.024789][ T7449] show_stack+0x2c/0x3c [ 168.025887][ T7449] dump_stack_lvl+0xe4/0x150 [ 168.027117][ T7449] dump_stack+0x1c/0x28 [ 168.028213][ T7449] should_fail_ex+0x3b0/0x50c [ 168.029479][ T7449] should_failslab+0xc8/0x130 [ 168.030812][ T7449] kmem_cache_alloc_noprof+0x84/0x350 [ 168.032286][ T7449] fat_parse_long+0xa0/0x688 [ 168.033602][ T7449] fat_search_long+0x300/0x1060 [ 168.035004][ T7449] vfat_lookup+0x1a0/0x450 [ 168.036136][ T7449] path_openat+0xc94/0x29f8 [ 168.037380][ T7449] do_filp_open+0x1bc/0x3cc [ 168.038629][ T7449] do_sys_openat2+0x124/0x1b8 [ 168.039956][ T7449] __arm64_sys_openat+0x1f0/0x240 [ 168.041371][ T7449] invoke_syscall+0x98/0x2b8 [ 168.042635][ T7449] el0_svc_common+0x130/0x23c [ 168.044013][ T7449] do_el0_svc+0x48/0x58 [ 168.045158][ T7449] el0_svc+0x54/0x168 [ 168.046232][ T7449] el0t_64_sync_handler+0x84/0xfc [ 168.047631][ T7449] el0t_64_sync+0x190/0x194 [ 168.102158][ T44] hfsplus: b-tree write err: -5, ino 4 [ 168.282383][ T7471] loop3: detected capacity change from 0 to 512 [ 168.314135][ T7471] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.318187][ T7471] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 168.321120][ T7471] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.213: Corrupt directory, running e2fsck is recommended [ 168.333823][ T7471] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 168.336812][ T7471] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.213: corrupted in-inode xattr: invalid ea_ino [ 168.379395][ T7471] EXT4-fs (loop3): Remounting filesystem read-only [ 168.381650][ T7471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.383804][ T7482] loop0: detected capacity change from 0 to 4096 [ 168.412567][ T7470] netlink: 'syz.4.212': attribute type 10 has an invalid length. [ 168.433180][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.436598][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.476685][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.478889][ T7470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.481889][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.483990][ T7470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.515287][ T7470] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.658646][ T7494] loop0: detected capacity change from 0 to 1024 [ 168.737629][ T1938] hfsplus: b-tree write err: -5, ino 4 [ 169.137244][ T6396] Bluetooth: hci1: command tx timeout [ 169.520132][ T6690] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.700654][ T7516] loop0: detected capacity change from 0 to 256 [ 169.713281][ T7516] FAULT_INJECTION: forcing a failure. [ 169.713281][ T7516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.735954][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.0.230 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 169.739016][ T7516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.742004][ T7516] Call trace: [ 169.743042][ T7516] dump_backtrace+0x1b8/0x1e4 [ 169.744381][ T7516] show_stack+0x2c/0x3c [ 169.745560][ T7516] dump_stack_lvl+0xe4/0x150 [ 169.746792][ T7516] dump_stack+0x1c/0x28 [ 169.747922][ T7516] should_fail_ex+0x3b0/0x50c [ 169.749293][ T7516] should_fail+0x14/0x24 [ 169.750565][ T7516] should_fail_usercopy+0x20/0x30 [ 169.751981][ T7516] simple_read_from_buffer+0xd4/0x248 [ 169.753469][ T7516] proc_fail_nth_read+0x134/0x1a0 [ 169.754966][ T7516] vfs_read+0x230/0x984 [ 169.756090][ T7516] ksys_read+0x15c/0x26c [ 169.757297][ T7516] __arm64_sys_read+0x7c/0x90 [ 169.758672][ T7516] invoke_syscall+0x98/0x2b8 [ 169.759924][ T7516] el0_svc_common+0x130/0x23c [ 169.761303][ T7516] do_el0_svc+0x48/0x58 [ 169.762455][ T7516] el0_svc+0x54/0x168 [ 169.763546][ T7516] el0t_64_sync_handler+0x84/0xfc [ 169.764966][ T7516] el0t_64_sync+0x190/0x194 [ 169.766381][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.815809][ T7521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.233'. [ 169.835664][ T7521] evm: overlay not supported [ 169.843325][ T7526] loop1: detected capacity change from 0 to 2048 [ 169.855764][ T7526] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.863755][ T7528] loop3: detected capacity change from 0 to 1024 [ 169.906009][ T7526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.922194][ T7526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.235: bg 0: block 234: padding at end of block bitmap is not set [ 169.931784][ T7526] EXT4-fs (loop1): Remounting filesystem read-only [ 169.967712][ T7532] netlink: 56 bytes leftover after parsing attributes in process `syz.0.238'. [ 169.990475][ T6958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.994254][ T309] hfsplus: b-tree write err: -5, ino 4 [ 170.085536][ T7543] loop1: detected capacity change from 0 to 512 [ 171.006292][ T7564] loop4: detected capacity change from 0 to 8 [ 171.035169][ T7563] SQUASHFS error: Failed to read block 0x4e8: -5 [ 171.060973][ T7563] SQUASHFS error: Failed to read block 0x4e8: -5 [ 171.074403][ T7563] SQUASHFS error: Failed to read block 0x4e8: -5 [ 171.082155][ T7564] SQUASHFS error: Failed to read block 0x4e8: -5 [ 171.084259][ T7564] SQUASHFS error: Failed to read block 0x4e8: -5 [ 171.087222][ T7564] SQUASHFS error: Failed to read block 0x4e8: -5 [ 171.094882][ T7567] loop2: detected capacity change from 0 to 256 [ 171.109855][ T7567] exfat: Invalid uid '0x00000000ffffffff' [ 171.376372][ T7578] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 171.398568][ T7556] loop0: detected capacity change from 0 to 32768 [ 171.400907][ T7556] XFS: attr2 mount option is deprecated. [ 171.402517][ T7556] XFS: ikeep mount option is deprecated. [ 171.434871][ T7556] XFS: noikeep mount option is deprecated. [ 171.478132][ T7556] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 171.546345][ T7556] XFS (loop0): Ending clean mount [ 171.555230][ T7592] loop1: detected capacity change from 0 to 257 [ 171.557496][ T7556] XFS (loop0): Quotacheck needed: Please wait. [ 171.567876][ T7592] exfat: Deprecated parameter 'utf8' [ 171.570913][ T7592] exfat: Unknown parameter 'allow' [ 171.604726][ T7556] XFS (loop0): Quotacheck: Done. [ 171.772231][ T6687] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 171.874335][ T7603] loop1: detected capacity change from 0 to 128 [ 171.886449][ T7603] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.053573][ T7609] FAULT_INJECTION: forcing a failure. [ 172.053573][ T7609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.058626][ T7609] CPU: 0 UID: 0 PID: 7609 Comm: syz.0.263 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 172.061410][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 172.064270][ T7609] Call trace: [ 172.065146][ T7609] dump_backtrace+0x1b8/0x1e4 [ 172.066491][ T7609] show_stack+0x2c/0x3c [ 172.067669][ T7609] dump_stack_lvl+0xe4/0x150 [ 172.068954][ T7609] dump_stack+0x1c/0x28 [ 172.070183][ T7609] should_fail_ex+0x3b0/0x50c [ 172.071467][ T7609] should_fail+0x14/0x24 [ 172.072614][ T7609] should_fail_usercopy+0x20/0x30 [ 172.074032][ T7609] simple_read_from_buffer+0xd4/0x248 [ 172.075544][ T7609] proc_fail_nth_read+0x134/0x1a0 [ 172.076935][ T7609] vfs_read+0x230/0x984 [ 172.078064][ T7609] ksys_read+0x15c/0x26c [ 172.079245][ T7609] __arm64_sys_read+0x7c/0x90 [ 172.080564][ T7609] invoke_syscall+0x98/0x2b8 [ 172.081886][ T7609] el0_svc_common+0x130/0x23c [ 172.083173][ T7609] do_el0_svc+0x48/0x58 [ 172.084375][ T7609] el0_svc+0x54/0x168 [ 172.085473][ T7609] el0t_64_sync_handler+0x84/0xfc [ 172.086727][ T7609] el0t_64_sync+0x190/0x194 [ 172.087919][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.145218][ T7587] loop3: detected capacity change from 0 to 32768 [ 172.182138][ T7617] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.185021][ T7617] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.187598][ T7617] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.190180][ T7617] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.215321][ T7587] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.282004][ T7620] loop1: detected capacity change from 0 to 1024 [ 172.302615][ T7625] loop0: detected capacity change from 0 to 256 [ 172.391629][ T7587] XFS (loop3): Ending clean mount [ 172.429114][ T7587] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2a4/0xf08, inode 0x2444 dinode [ 172.432394][ T7587] XFS (loop3): Unmount and run xfs_repair [ 172.433952][ T7587] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 172.436003][ T7587] 00000000: 49 4e 81 ed 03 02 00 00 00 00 02 00 00 00 00 00 IN.............. [ 172.448632][ T44] hfsplus: b-tree write err: -5, ino 4 [ 172.457358][ T7587] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.462727][ T7587] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 172.465233][ T7587] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 172.486809][ T7587] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 172.490513][ T7587] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4 .............ro. [ 172.492992][ T7587] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05 .....G.......... [ 172.495697][ T7587] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 172.524922][ T7637] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2a4/0xf08, inode 0x2444 dinode [ 172.529485][ T7637] XFS (loop3): Unmount and run xfs_repair [ 172.535001][ T7637] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 172.548789][ T7637] 00000000: 49 4e 81 ed 03 02 00 00 00 00 02 00 00 00 00 00 IN.............. [ 172.551336][ T7637] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 172.553814][ T7637] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 172.631895][ T7637] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 172.845480][ T7637] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 172.923262][ T7637] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4 .............ro. [ 173.065037][ T7637] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05 .....G.......... [ 173.226436][ T7637] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 173.283294][ T6690] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.100251][ T7649] loop4: detected capacity change from 0 to 2048 [ 174.125790][ T7655] loop3: detected capacity change from 0 to 128 [ 174.250893][ T7655] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.289201][ T7649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.300259][ T7666] loop2: detected capacity change from 0 to 256 [ 175.036594][ T7644] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.044402][ T7644] EXT4-fs (loop4): Remounting filesystem read-only [ 175.046597][ T7644] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 175.092614][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.205840][ T7689] loop0: detected capacity change from 0 to 256 [ 175.336136][ T7701] loop4: detected capacity change from 0 to 128 [ 175.340749][ T7701] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.066246][ T7688] loop1: detected capacity change from 0 to 32768 [ 176.241663][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 176.279845][ T7733] loop1: detected capacity change from 0 to 128 [ 176.282247][ T7733] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.279506][ T7764] FAULT_INJECTION: forcing a failure. [ 177.279506][ T7764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.291372][ T7764] CPU: 0 UID: 0 PID: 7764 Comm: syz.4.317 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 177.294160][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.296967][ T7764] Call trace: [ 177.297869][ T7764] dump_backtrace+0x1b8/0x1e4 [ 177.299160][ T7764] show_stack+0x2c/0x3c [ 177.300327][ T7764] dump_stack_lvl+0xe4/0x150 [ 177.301617][ T7764] dump_stack+0x1c/0x28 [ 177.302805][ T7764] should_fail_ex+0x3b0/0x50c [ 177.304152][ T7764] should_fail+0x14/0x24 [ 177.305294][ T7764] should_fail_usercopy+0x20/0x30 [ 177.306684][ T7764] memdup_user+0x8c/0x1f8 [ 177.307991][ T7764] snd_pcm_hw_refine_user+0x30/0x1e8 [ 177.308625][ T7770] loop2: detected capacity change from 0 to 1024 [ 177.309484][ T7764] snd_pcm_common_ioctl+0x790/0xb48 [ 177.309502][ T7764] snd_pcm_ioctl+0x94/0xbc [ 177.312200][ T7770] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 177.312649][ T7764] __arm64_sys_ioctl+0x14c/0x1c8 [ 177.312671][ T7764] invoke_syscall+0x98/0x2b8 [ 177.313991][ T7770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 177.316923][ T7764] el0_svc_common+0x130/0x23c [ 177.316946][ T7764] do_el0_svc+0x48/0x58 [ 177.316956][ T7764] el0_svc+0x54/0x168 [ 177.316969][ T7764] el0t_64_sync_handler+0x84/0xfc [ 177.316981][ T7764] el0t_64_sync+0x190/0x194 [ 177.317042][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.346272][ T7770] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 177.366535][ T7770] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.319: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 177.371240][ T7770] EXT4-fs (loop2): no journal found [ 177.630867][ T7788] FAULT_INJECTION: forcing a failure. [ 177.630867][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.634692][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.2.326 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 177.637620][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 177.640368][ T7788] Call trace: [ 177.641274][ T7788] dump_backtrace+0x1b8/0x1e4 [ 177.642581][ T7788] show_stack+0x2c/0x3c [ 177.643727][ T7788] dump_stack_lvl+0xe4/0x150 [ 177.645022][ T7788] dump_stack+0x1c/0x28 [ 177.646149][ T7788] should_fail_ex+0x3b0/0x50c [ 177.647533][ T7788] should_fail+0x14/0x24 [ 177.648656][ T7788] should_fail_usercopy+0x20/0x30 [ 177.650042][ T7788] copy_page_from_iter_atomic+0x30c/0x168c [ 177.651647][ T7788] generic_perform_write+0x5d4/0x8e0 [ 177.653133][ T7788] shmem_file_write_iter+0x110/0x138 [ 177.654604][ T7788] vfs_write+0x940/0xc80 [ 177.655757][ T7788] ksys_write+0x15c/0x26c [ 177.657049][ T7788] __arm64_sys_write+0x7c/0x90 [ 177.658443][ T7788] invoke_syscall+0x98/0x2b8 [ 177.659719][ T7788] el0_svc_common+0x130/0x23c [ 177.661072][ T7788] do_el0_svc+0x48/0x58 [ 177.662177][ T7788] el0_svc+0x54/0x168 [ 177.663214][ T7788] el0t_64_sync_handler+0x84/0xfc [ 177.664681][ T7788] el0t_64_sync+0x190/0x194 [ 177.697791][ T7788] loop2: detected capacity change from 0 to 128 [ 177.870324][ T7796] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20003 [ 178.017051][ T7783] loop1: detected capacity change from 0 to 40427 [ 178.022666][ T7783] F2FS-fs (loop1): invalid crc value [ 178.026574][ T7783] F2FS-fs (loop1): Found nat_bits in checkpoint [ 178.229034][ T7783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 178.676468][ T7811] FAULT_INJECTION: forcing a failure. [ 178.676468][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 178.680528][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.0.332 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 178.683293][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 178.686140][ T7811] Call trace: [ 178.687274][ T7811] dump_backtrace+0x1b8/0x1e4 [ 178.688576][ T7811] show_stack+0x2c/0x3c [ 178.689703][ T7811] dump_stack_lvl+0xe4/0x150 [ 178.690991][ T7811] dump_stack+0x1c/0x28 [ 178.692180][ T7811] should_fail_ex+0x3b0/0x50c [ 178.693495][ T7811] should_failslab+0xc8/0x130 [ 178.694846][ T7811] __kmalloc_noprof+0xf4/0x498 [ 178.696197][ T7811] snd_pcm_hw_refine+0x72c/0x1430 [ 178.697585][ T7811] snd_pcm_hw_refine_user+0x54/0x1e8 [ 178.699067][ T7811] snd_pcm_common_ioctl+0x790/0xb48 [ 178.700564][ T7811] snd_pcm_ioctl+0x94/0xbc [ 178.701792][ T7811] __arm64_sys_ioctl+0x14c/0x1c8 [ 178.703253][ T7811] invoke_syscall+0x98/0x2b8 [ 178.704634][ T7811] el0_svc_common+0x130/0x23c [ 178.705915][ T7811] do_el0_svc+0x48/0x58 [ 178.707060][ T7811] el0_svc+0x54/0x168 [ 178.708202][ T7811] el0t_64_sync_handler+0x84/0xfc [ 178.709643][ T7811] el0t_64_sync+0x190/0x194 [ 178.870726][ T7821] loop2: detected capacity change from 0 to 1024 [ 178.891676][ T7821] EXT4-fs: Ignoring removed bh option [ 178.935051][ T7821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.163999][ T7831] loop4: detected capacity change from 0 to 2048 [ 179.166343][ T7831] udf: Unknown parameter ' 17895 97173504 4317 18446744073709551615 281' [ 179.182124][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 179.284641][ T6399] Bluetooth: hci6: command 0x0406 tx timeout [ 180.030522][ T7847] loop4: detected capacity change from 0 to 64 [ 180.038235][ T7850] FAULT_INJECTION: forcing a failure. [ 180.038235][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 180.041840][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.0.346 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 180.044657][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.047398][ T7850] Call trace: [ 180.048351][ T7850] dump_backtrace+0x1b8/0x1e4 [ 180.049648][ T7850] show_stack+0x2c/0x3c [ 180.050793][ T7850] dump_stack_lvl+0xe4/0x150 [ 180.052055][ T7850] dump_stack+0x1c/0x28 [ 180.053253][ T7850] should_fail_ex+0x3b0/0x50c [ 180.054578][ T7850] should_failslab+0xc8/0x130 [ 180.056024][ T7850] __kmalloc_noprof+0xf4/0x498 [ 180.057479][ T7850] tomoyo_encode+0x270/0x4b0 [ 180.058753][ T7850] tomoyo_realpath_from_path+0x478/0x4cc [ 180.060383][ T7850] tomoyo_path_number_perm+0x1ec/0x6a8 [ 180.061978][ T7850] tomoyo_file_ioctl+0x2c/0x3c [ 180.063381][ T7850] security_file_ioctl+0x80/0xbc [ 180.064818][ T7850] __arm64_sys_ioctl+0xa8/0x1c8 [ 180.066358][ T7850] invoke_syscall+0x98/0x2b8 [ 180.067686][ T7850] el0_svc_common+0x130/0x23c [ 180.069077][ T7850] do_el0_svc+0x48/0x58 [ 180.070280][ T7850] el0_svc+0x54/0x168 [ 180.071422][ T7850] el0t_64_sync_handler+0x84/0xfc [ 180.072851][ T7850] el0t_64_sync+0x190/0x194 [ 180.107978][ T7850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.301146][ T6962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.374673][ T7870] FAULT_INJECTION: forcing a failure. [ 180.374673][ T7870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.387470][ T7870] CPU: 0 UID: 0 PID: 7870 Comm: syz.2.352 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 180.390248][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.392970][ T7870] Call trace: [ 180.393777][ T7870] dump_backtrace+0x1b8/0x1e4 [ 180.395069][ T7870] show_stack+0x2c/0x3c [ 180.396336][ T7870] dump_stack_lvl+0xe4/0x150 [ 180.397562][ T7870] dump_stack+0x1c/0x28 [ 180.398709][ T7870] should_fail_ex+0x3b0/0x50c [ 180.400046][ T7870] should_fail+0x14/0x24 [ 180.401252][ T7870] should_fail_usercopy+0x20/0x30 [ 180.402594][ T7870] snd_pcm_hw_refine_user+0x9c/0x1e8 [ 180.403992][ T7870] snd_pcm_common_ioctl+0x790/0xb48 [ 180.405435][ T7870] snd_pcm_ioctl+0x94/0xbc [ 180.406623][ T7870] __arm64_sys_ioctl+0x14c/0x1c8 [ 180.407939][ T7870] invoke_syscall+0x98/0x2b8 [ 180.409192][ T7870] el0_svc_common+0x130/0x23c [ 180.410468][ T7870] do_el0_svc+0x48/0x58 [ 180.411585][ T7870] el0_svc+0x54/0x168 [ 180.412618][ T7870] el0t_64_sync_handler+0x84/0xfc [ 180.413986][ T7870] el0t_64_sync+0x190/0x194 [ 180.432542][ T7872] loop0: detected capacity change from 0 to 512 [ 180.481029][ T7872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.522770][ T7878] FAULT_INJECTION: forcing a failure. [ 180.522770][ T7878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.529231][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.3.355 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 180.531872][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 180.534512][ T7878] Call trace: [ 180.535388][ T7878] dump_backtrace+0x1b8/0x1e4 [ 180.536590][ T7878] show_stack+0x2c/0x3c [ 180.537752][ T7878] dump_stack_lvl+0xe4/0x150 [ 180.539026][ T7878] dump_stack+0x1c/0x28 [ 180.540131][ T7878] should_fail_ex+0x3b0/0x50c [ 180.541388][ T7878] should_fail+0x14/0x24 [ 180.542486][ T7878] should_fail_usercopy+0x20/0x30 [ 180.543850][ T7878] rose_getsockopt+0x500/0x6ec [ 180.545188][ T7878] do_sock_getsockopt+0x274/0x660 [ 180.546585][ T7878] __sys_getsockopt+0x120/0x19c [ 180.547890][ T7878] __arm64_sys_getsockopt+0xb8/0xd4 [ 180.549330][ T7878] invoke_syscall+0x98/0x2b8 [ 180.550593][ T7878] el0_svc_common+0x130/0x23c [ 180.551880][ T7878] do_el0_svc+0x48/0x58 [ 180.553021][ T7878] el0_svc+0x54/0x168 [ 180.554198][ T7878] el0t_64_sync_handler+0x84/0xfc [ 180.555600][ T7878] el0t_64_sync+0x190/0x194 [ 180.709575][ T7880] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 180.713036][ T7880] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 180.715513][ T7880] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.354: Failed to acquire dquot type 0 [ 180.722404][ T7880] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 3: comm syz.0.354: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 180.728456][ T7880] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 180.731597][ T7880] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 64512 [ 180.734271][ T7880] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.354: Failed to acquire dquot type 0 [ 180.875623][ T7854] loop1: detected capacity change from 0 to 32768 [ 180.887691][ T7854] jfs: Unrecognized mount option "0xffffffffffffffff0x0000000000000000" or missing value [ 181.014226][ T7862] netlink: 'syz.1.338': attribute type 2 has an invalid length. [ 181.701757][ T6687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.757796][ T7895] FAULT_INJECTION: forcing a failure. [ 181.757796][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.762076][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.4.362 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 181.764846][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 181.767829][ T7895] Call trace: [ 181.768732][ T7895] dump_backtrace+0x1b8/0x1e4 [ 181.770083][ T7895] show_stack+0x2c/0x3c [ 181.771299][ T7895] dump_stack_lvl+0xe4/0x150 [ 181.772637][ T7895] dump_stack+0x1c/0x28 [ 181.773807][ T7895] should_fail_ex+0x3b0/0x50c [ 181.775135][ T7895] should_fail+0x14/0x24 [ 181.776352][ T7895] should_fail_usercopy+0x20/0x30 [ 181.777760][ T7895] simple_read_from_buffer+0xd4/0x248 [ 181.779298][ T7895] proc_fail_nth_read+0x134/0x1a0 [ 181.780771][ T7895] vfs_read+0x230/0x984 [ 181.781920][ T7895] ksys_read+0x15c/0x26c [ 181.783150][ T7895] __arm64_sys_read+0x7c/0x90 [ 181.784515][ T7895] invoke_syscall+0x98/0x2b8 [ 181.785798][ T7895] el0_svc_common+0x130/0x23c [ 181.787142][ T7895] do_el0_svc+0x48/0x58 [ 181.788252][ T7895] el0_svc+0x54/0x168 [ 181.789483][ T7895] el0t_64_sync_handler+0x84/0xfc [ 181.790939][ T7895] el0t_64_sync+0x190/0x194 [ 181.844964][ T7899] loop2: detected capacity change from 0 to 512 [ 181.872825][ T7899] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 181.884777][ T7899] FAT-fs (loop2): Filesystem has been set read-only [ 181.904945][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 181.934730][ T7899] loop2: detected capacity change from 0 to 1024 [ 181.983754][ T7899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.092823][ T7899] tmpfs: Unknown parameter 'hq' [ 182.131908][ T7911] loop3: detected capacity change from 0 to 128 [ 182.150569][ T7897] loop0: detected capacity change from 0 to 40427 [ 182.158629][ T7897] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 182.160901][ T7897] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.208164][ T7897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.237615][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.250379][ T7897] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.252312][ T7897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.294079][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.297872][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.301275][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.308030][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.323476][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.356765][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.379186][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.392162][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.396743][ T6962] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #11: comm syz-executor: invalid size [ 182.441496][ T7909] loop4: detected capacity change from 0 to 32768 [ 182.445410][ T7909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.367 (7909) [ 182.461163][ T7909] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.463953][ T7909] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 182.466291][ T7909] BTRFS info (device loop4): using free-space-tree [ 183.464601][ T7947] FAULT_INJECTION: forcing a failure. [ 183.464601][ T7947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.484342][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: syz.1.377 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 183.487668][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 183.490551][ T7947] Call trace: [ 183.491531][ T7947] dump_backtrace+0x1b8/0x1e4 [ 183.492809][ T7947] show_stack+0x2c/0x3c [ 183.493994][ T7947] dump_stack_lvl+0xe4/0x150 [ 183.495277][ T7947] dump_stack+0x1c/0x28 [ 183.496431][ T7947] should_fail_ex+0x3b0/0x50c [ 183.497728][ T7947] should_fail+0x14/0x24 [ 183.498871][ T7947] should_fail_usercopy+0x20/0x30 [ 183.500306][ T7947] simple_read_from_buffer+0xd4/0x248 [ 183.501794][ T7947] proc_fail_nth_read+0x134/0x1a0 [ 183.503301][ T7947] vfs_read+0x230/0x984 [ 183.504531][ T7947] ksys_read+0x15c/0x26c [ 183.505678][ T7947] __arm64_sys_read+0x7c/0x90 [ 183.507040][ T7947] invoke_syscall+0x98/0x2b8 [ 183.508327][ T7947] el0_svc_common+0x130/0x23c [ 183.509606][ T7947] do_el0_svc+0x48/0x58 [ 183.510788][ T7947] el0_svc+0x54/0x168 [ 183.511864][ T7947] el0t_64_sync_handler+0x84/0xfc [ 183.513304][ T7947] el0t_64_sync+0x190/0x194 [ 183.606486][ T2131] Bluetooth: hci2: Frame reassembly failed (-84) [ 183.646213][ T7953] loop1: detected capacity change from 0 to 1024 [ 183.652196][ T7953] hfsplus: failed to load catalog file [ 183.656609][ T6962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.813599][ T7963] loop3: detected capacity change from 0 to 8 [ 184.735109][ T5963] Bluetooth: hci1: command 0x0406 tx timeout [ 184.739502][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 185.324974][ T6400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.345352][ T6400] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.349095][ T6400] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.351715][ T6400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.354023][ T6400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.356048][ T6400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.371033][ T7963] loop3: detected capacity change from 0 to 32768 [ 185.375727][ T7963] jfs: Unrecognized mount option "CÈïè" or missing value [ 185.673283][ T6396] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 186.571168][ T6672] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.577532][ T7993] loop3: detected capacity change from 0 to 8 [ 187.241146][ T2131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.384924][ T6399] Bluetooth: hci3: command tx timeout [ 187.390369][ T2334] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.397674][ T2334] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.620353][ T2131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.881718][ T7976] chnl_net:caif_netlink_parms(): no params data found [ 188.302380][ T2131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.558002][ T8017] loop1: detected capacity change from 0 to 32768 [ 188.560040][ T2131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.732735][ T8036] FAULT_INJECTION: forcing a failure. [ 188.732735][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 188.736355][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.3.405 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 188.739021][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 188.741610][ T8036] Call trace: [ 188.742491][ T8036] dump_backtrace+0x1b8/0x1e4 [ 188.743652][ T8036] show_stack+0x2c/0x3c [ 188.744761][ T8036] dump_stack_lvl+0xe4/0x150 [ 188.745984][ T8036] dump_stack+0x1c/0x28 [ 188.747086][ T8036] should_fail_ex+0x3b0/0x50c [ 188.748256][ T8036] should_failslab+0xc8/0x130 [ 188.749438][ T8036] __kmalloc_noprof+0xf4/0x498 [ 188.750725][ T8036] tomoyo_realpath_from_path+0xc8/0x4cc [ 188.752126][ T8036] tomoyo_path_number_perm+0x1ec/0x6a8 [ 188.753458][ T8036] tomoyo_file_ioctl+0x2c/0x3c [ 188.754732][ T8036] security_file_ioctl+0x80/0xbc [ 188.756029][ T8036] __arm64_sys_ioctl+0xa8/0x1c8 [ 188.757258][ T8036] invoke_syscall+0x98/0x2b8 [ 188.758610][ T8036] el0_svc_common+0x130/0x23c [ 188.759857][ T8036] do_el0_svc+0x48/0x58 [ 188.761157][ T8036] el0_svc+0x54/0x168 [ 188.762268][ T8036] el0t_64_sync_handler+0x84/0xfc [ 188.763666][ T8036] el0t_64_sync+0x190/0x194 [ 188.777280][ T8036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.797562][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.799762][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.802160][ T7976] bridge_slave_0: entered allmulticast mode [ 188.804561][ T7976] bridge_slave_0: entered promiscuous mode [ 188.815456][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.818255][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.820487][ T7976] bridge_slave_1: entered allmulticast mode [ 188.822791][ T7976] bridge_slave_1: entered promiscuous mode [ 190.316979][ T6399] Bluetooth: hci3: command tx timeout [ 190.522175][ T7976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.531415][ T7976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.622463][ T7976] team0: Port device team_slave_0 added [ 190.645393][ T7976] team0: Port device team_slave_1 added [ 190.755166][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.765712][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.806980][ T7976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.811092][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.812999][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.827111][ T7976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.548756][ T7976] hsr_slave_0: entered promiscuous mode [ 191.565061][ T8055] loop3: detected capacity change from 0 to 32768 [ 191.576748][ T8055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.413 (8055) [ 191.640915][ T8055] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.646550][ T8055] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 191.704570][ T8055] BTRFS info (device loop3): using free-space-tree [ 191.802281][ T7976] hsr_slave_1: entered promiscuous mode [ 191.998990][ T7976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.041283][ T7976] Cannot create hsr debugfs directory [ 192.222121][ T2131] bridge_slave_1: left allmulticast mode [ 192.233838][ T2131] bridge_slave_1: left promiscuous mode [ 192.242983][ T2131] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.264756][ T2131] bridge_slave_0: left allmulticast mode [ 192.270693][ T2131] bridge_slave_0: left promiscuous mode [ 192.274550][ T2131] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.337072][ T6399] Bluetooth: hci3: command tx timeout [ 192.479142][ T8058] loop1: detected capacity change from 0 to 40427 [ 192.481972][ T8058] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 192.484159][ T8058] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.547329][ T8058] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.579528][ T8058] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 192.581472][ T8058] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.650465][ T8102] loop4: detected capacity change from 0 to 512 [ 192.668561][ T30] audit: type=1326 audit(192.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8057 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b459e8 code=0x7ffc0000 [ 192.685016][ T30] audit: type=1326 audit(192.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8057 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b459e8 code=0x7ffc0000 [ 192.712391][ T8102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.716990][ T30] audit: type=1326 audit(192.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8057 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=433 compat=0 ip=0xffffa0b459e8 code=0x7ffc0000 [ 192.729784][ T30] audit: type=1326 audit(192.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8057 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b459e8 code=0x7ffc0000 [ 192.755501][ T30] audit: type=1326 audit(192.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8057 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0b459e8 code=0x7ffc0000 [ 192.766492][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.964783][ T8120] trusted_key: syz.4.426 sent an empty control message without MSG_MORE. [ 194.049692][ T2131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.089595][ T2131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.129215][ T2131] bond0 (unregistering): Released all slaves [ 194.283724][ T6690] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.308145][ T1925] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.421092][ T6399] Bluetooth: hci3: command tx timeout [ 194.739132][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.755221][ T8155] loop1: detected capacity change from 0 to 64 [ 194.763033][ T8155] hfs: unable to parse mount options [ 194.868310][ T30] audit: type=1326 audit(194.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8149 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff873459e8 code=0x7fc00000 [ 194.879527][ T30] audit: type=1326 audit(194.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8149 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff873459e8 code=0x7fc00000 [ 194.936972][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 194.946165][ T25] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 194.956463][ T25] usb 1-1: config 0 has no interface number 0 [ 194.958619][ T25] usb 1-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.963406][ T25] usb 1-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.966582][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 194.969736][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.978158][ T25] usb 1-1: config 0 descriptor?? [ 195.086987][ T2131] hsr_slave_0: left promiscuous mode [ 195.128264][ T2131] hsr_slave_1: left promiscuous mode [ 195.175395][ T8155] loop1: detected capacity change from 0 to 32768 [ 195.207025][ T2131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.211777][ T2131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.227861][ T2131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.231718][ T2131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.303500][ T2131] veth1_macvtap: left promiscuous mode [ 195.305270][ T2131] veth0_macvtap: left promiscuous mode [ 195.314952][ T2131] veth1_vlan: left promiscuous mode [ 195.316609][ T2131] veth0_vlan: left promiscuous mode [ 195.333981][ T8155] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,promote_target=invalid device 127,journal_flush_delay=1311720,journal_reclaim_delay=1000,nocow [ 195.354524][ T8155] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 195.358996][ T8155] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.10: disk_accounting_v3 [ 195.358996][ T8155] running recovery passes: check_allocations [ 195.387718][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.417966][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.420309][ T8155] bcachefs (loop1): accounting_read... done [ 195.425512][ T8155] bcachefs (loop1): alloc_read... done [ 195.433386][ T8155] bcachefs (loop1): stripes_read... done [ 195.437916][ T8155] bcachefs (loop1): snapshots_read... done [ 195.440967][ T8155] bcachefs (loop1): check_allocations... [ 195.484593][ T30] audit: type=1326 audit(195.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8149 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff873459e8 code=0x7fc00000 [ 195.496253][ T8155] btree ptr not marked in member info btree allocated bitmap [ 195.496285][ T8155] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 195.497072][ T30] audit: type=1326 audit(195.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8149 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff873459e8 code=0x7fc00000 [ 195.500501][ T8155] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 10 [ 195.511088][ T30] audit: type=1326 audit(195.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8149 comm="syz.3.430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff873459e8 code=0x7fc00000 [ 195.527660][ T8155] bcachefs (loop1): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 195.538230][ T8155] bcachefs (loop1): bch2_gc_btree(): error fsck_errors_not_fixed [ 195.540417][ T8155] bcachefs (loop1): bch2_gc_btrees(): error fsck_errors_not_fixed [ 195.562336][ T8155] bcachefs (loop1): bch2_check_allocations(): error fsck_errors_not_fixed [ 195.566191][ T8155] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 195.571682][ T8155] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 195.574712][ T8155] bcachefs (loop1): shutting down [ 195.603051][ T8155] bcachefs (loop1): shutdown complete [ 195.816337][ T8155] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 195.879339][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.908740][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.369940][ T8210] loop4: detected capacity change from 0 to 2048 [ 197.394229][ T8210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.419950][ T6672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.548895][ T2131] team0 (unregistering): Port device team_slave_1 removed [ 197.580115][ T8219] loop4: detected capacity change from 0 to 8192 [ 197.625158][ T8219] loop4: p2 p3 p4 [ 197.634707][ T8219] loop4: p3 start 83888008 is beyond EOD, truncated [ 197.636505][ T8219] loop4: p4 size 50331904 extends beyond EOD, truncated [ 197.658642][ T6010] loop4: p2 p3 p4 [ 197.665366][ T6010] loop4: p3 start 83888008 is beyond EOD, truncated [ 197.669704][ T6010] loop4: p4 size 50331904 extends beyond EOD, truncated [ 197.710756][ T7204] udevd[7204]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 197.710843][ T7124] udevd[7124]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 197.775257][ T7124] udevd[7124]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 197.778791][ T2131] team0 (unregistering): Port device team_slave_0 removed [ 197.780066][ T7112] udevd[7112]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 200.191354][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 200.228552][ T6831] usb 1-1: USB disconnect, device number 3 [ 200.390861][ T8275] loop0: detected capacity change from 0 to 512 [ 200.401968][ T8275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.427722][ T8278] input: syz0 as /devices/virtual/input/input3 [ 200.451223][ T8275] EXT4-fs (loop0): 1 truncate cleaned up [ 200.453252][ T8275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.470180][ T7976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.516980][ T7976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.538727][ T7976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.587095][ T7976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.723258][ T8294] bond0: entered promiscuous mode [ 200.724795][ T8294] bond_slave_0: entered promiscuous mode [ 200.726523][ T8294] bond_slave_1: entered promiscuous mode [ 201.005825][ T8317] loop4: detected capacity change from 0 to 512 [ 201.015448][ T7976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.079850][ T7976] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.144565][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.146904][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.191236][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.193261][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.255236][ T8317] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 201.415454][ T6687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.881667][ T8332] loop0: detected capacity change from 0 to 1024 [ 201.884003][ T8332] EXT4-fs: Ignoring removed orlov option [ 201.885518][ T8332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.943049][ T8332] EXT4-fs (loop0): stripe (106) is not aligned with cluster size (16), stripe is disabled [ 202.003255][ T8332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.080378][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.138862][ T8346] loop1: detected capacity change from 0 to 1024 [ 202.141140][ T8346] EXT4-fs: Ignoring removed orlov option [ 202.142881][ T8346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.160112][ T7976] veth0_vlan: entered promiscuous mode [ 202.180016][ T8346] EXT4-fs (loop1): stripe (106) is not aligned with cluster size (16), stripe is disabled [ 202.185345][ T7976] veth1_vlan: entered promiscuous mode [ 202.243376][ T8346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.261990][ T7976] veth0_macvtap: entered promiscuous mode [ 202.265364][ T7976] veth1_macvtap: entered promiscuous mode [ 202.923261][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.933264][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.935950][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.947519][ T6809] Bluetooth: hci2: Frame reassembly failed (-84) [ 202.951821][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.957240][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.960058][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.962787][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.976153][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.980237][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.989167][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.992024][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.994673][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.007508][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.010497][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.013375][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.016035][ T7976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.036901][ T7976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.040611][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.049462][ T7976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.051771][ T7976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.064731][ T7976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.074513][ T7976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.182918][ T1925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.185059][ T1925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.229447][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.232201][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.531551][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.593677][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.097107][ T6958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.149949][ T6687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.231320][ T8376] loop0: detected capacity change from 0 to 512 [ 204.266986][ T8376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.297110][ T8376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.484: bg 0: block 256: padding at end of block bitmap is not set [ 204.306212][ T8376] __quota_error: 63 callbacks suppressed [ 204.306230][ T8376] Quota error (device loop0): write_blk: dquota write failed [ 204.310467][ T8376] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 204.313024][ T8376] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 204.315655][ T8376] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.484: Failed to acquire dquot type 1 [ 204.469215][ T6687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.868178][ T6809] Bluetooth: hci4: Frame reassembly failed (-84) [ 204.978390][ T6400] Bluetooth: hci2: command 0x1003 tx timeout [ 204.980943][ T6399] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 206.774767][ T8407] loop3: detected capacity change from 0 to 512 [ 206.813829][ T8407] EXT4-fs (loop3): Test dummy encryption mode enabled [ 206.833989][ T8407] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 1: comm syz.3.494: invalid block [ 206.847083][ T8407] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.494: couldn't read orphan inode 11 (err -117) [ 206.878124][ T8407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.892319][ T8407] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.494: Directory hole found for htree leaf block 0 [ 206.896987][ T6396] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 206.897712][ T6399] Bluetooth: hci4: command 0x1003 tx timeout [ 206.929036][ T8407] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.494: Directory hole found for htree leaf block 0 [ 207.751356][ T8428] loop1: detected capacity change from 0 to 512 [ 207.755121][ T6690] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.807200][ T8428] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.499: casefold flag without casefold feature [ 207.826059][ T8428] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.499: couldn't read orphan inode 15 (err -117) [ 207.858073][ T8428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.867405][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.908067][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.930297][ T8433] input: syz1 as /devices/virtual/input/input4 [ 208.168307][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.267879][ T8444] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.499: Directory hole found for htree leaf block 0 [ 208.273221][ T8444] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 208.645223][ T6958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.752588][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.755603][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.765389][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 208.769156][ T8457] netlink: 'syz.1.509': attribute type 7 has an invalid length. [ 208.778812][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.787854][ T25] usb 1-1: config 0 descriptor?? [ 208.804641][ T8459] loop3: detected capacity change from 0 to 2048 [ 208.816691][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.843556][ T8456] syzkaller0: entered promiscuous mode [ 208.848736][ T8465] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.859819][ T8456] syzkaller0: entered allmulticast mode [ 208.868410][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.029047][ T8435] loop0: detected capacity change from 0 to 256 [ 210.008281][ T8483] loop3: detected capacity change from 0 to 512 [ 210.035153][ T8483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.728818][ T8483] EXT4-fs: Cannot change quota options when quota turned on [ 210.770679][ T6690] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.908558][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 210.927584][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 210.935484][ T25] usb 1-1: USB disconnect, device number 4 [ 210.942593][ T8480] loop4: detected capacity change from 0 to 32768 [ 210.992545][ T8480] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 211.007267][ T8502] loop0: detected capacity change from 0 to 256 [ 211.012219][ T8502] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.022799][ T8502] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 211.035620][ T8480] XFS (loop4): Ending clean mount [ 211.124999][ T6672] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 211.466596][ T8510] loop4: detected capacity change from 0 to 32768 [ 211.469714][ T8510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.525 (8510) [ 211.485704][ T8510] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.488897][ T8510] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 211.491395][ T8510] BTRFS info (device loop4): using free-space-tree [ 211.569293][ T8510] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 211.666135][ T6672] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.952590][ T8530] loop4: detected capacity change from 0 to 32768 [ 211.964613][ T8530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.529 (8530) [ 211.978258][ T8530] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.981488][ T8530] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 211.984135][ T8530] BTRFS info (device loop4): using free-space-tree [ 212.241699][ T6672] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.362161][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.404602][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.941621][ T8553] binder: 8552:8553 tried to acquire reference to desc 0, got 1 instead [ 212.945356][ T25] binder: release 8552:8553 transaction 37 out, still active [ 212.949402][ T25] binder: undelivered TRANSACTION_COMPLETE [ 212.953232][ T6447] binder: send failed reply for transaction 37, target dead [ 218.869242][ T6400] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.875498][ T6400] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.879380][ T6400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.881780][ T6400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.883982][ T6400] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.885965][ T6400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.874693][ T6400] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.891082][ T6400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.898628][ T6400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.901410][ T6400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.902476][ T5963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.904000][ T6400] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.909195][ T5963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.912144][ T5963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.912382][ T6400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.914989][ T5963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.926065][ T6396] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.931502][ T6396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.977268][ T5963] Bluetooth: hci2: command tx timeout [ 221.892160][ T6399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.895555][ T6399] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 221.898812][ T6399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 221.902186][ T6399] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.904465][ T6399] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.906952][ T6399] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.018390][ T6399] Bluetooth: hci5: command tx timeout [ 223.021956][ T6399] Bluetooth: hci4: command tx timeout [ 223.067304][ T5963] Bluetooth: hci2: command tx timeout [ 223.464764][ T8568] chnl_net:caif_netlink_parms(): no params data found [ 223.562308][ T8590] x_tables: unsorted entry at hook 2 [ 223.781370][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.868570][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 223.933392][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.947165][ T5963] Bluetooth: hci7: command tx timeout [ 223.962459][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 223.976774][ T8563] chnl_net:caif_netlink_parms(): no params data found [ 223.992491][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.994512][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.996547][ T8568] bridge_slave_0: entered allmulticast mode [ 223.999150][ T8568] bridge_slave_0: entered promiscuous mode [ 224.002327][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.004255][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.006175][ T8568] bridge_slave_1: entered allmulticast mode [ 224.008566][ T8568] bridge_slave_1: entered promiscuous mode [ 224.062455][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.118097][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.183282][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.188194][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.190301][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.192419][ T8565] bridge_slave_0: entered allmulticast mode [ 224.194609][ T8565] bridge_slave_0: entered promiscuous mode [ 224.214710][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.217827][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.219742][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.221845][ T8565] bridge_slave_1: entered allmulticast mode [ 224.224081][ T8565] bridge_slave_1: entered promiscuous mode [ 224.261192][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.264058][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.266019][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.268248][ T8558] bridge_slave_0: entered allmulticast mode [ 224.270552][ T8558] bridge_slave_0: entered promiscuous mode [ 224.274413][ T8563] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.276452][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.281822][ T8563] bridge_slave_0: entered allmulticast mode [ 224.284734][ T8563] bridge_slave_0: entered promiscuous mode [ 224.300705][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.303633][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.305645][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.309451][ T8558] bridge_slave_1: entered allmulticast mode [ 224.311903][ T8558] bridge_slave_1: entered promiscuous mode [ 224.319230][ T8563] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.321315][ T8563] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.323381][ T8563] bridge_slave_1: entered allmulticast mode [ 224.325626][ T8563] bridge_slave_1: entered promiscuous mode [ 224.349293][ T8568] team0: Port device team_slave_0 added [ 224.356327][ T8568] team0: Port device team_slave_1 added [ 224.410064][ T8610] team0: Device ip6_vti0 is of different type [ 224.421062][ T8565] team0: Port device team_slave_0 added [ 224.424086][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.425907][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.451917][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.457297][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.461531][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.504634][ T8563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.517742][ T8563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.535590][ T8565] team0: Port device team_slave_1 added [ 224.542489][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.544449][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.559553][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.706893][ T8614] 9pnet_fd: Insufficient options for proto=fd [ 224.963340][ T8558] team0: Port device team_slave_0 added [ 225.087028][ T5963] Bluetooth: hci4: command tx timeout [ 225.088830][ T5963] Bluetooth: hci5: command tx timeout [ 225.137017][ T6399] Bluetooth: hci2: command tx timeout [ 225.223514][ T8563] team0: Port device team_slave_0 added [ 225.226198][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.230106][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.237336][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.369538][ T8568] hsr_slave_0: entered promiscuous mode [ 225.414932][ T8568] hsr_slave_1: entered promiscuous mode [ 225.449485][ T8558] team0: Port device team_slave_1 added [ 225.451465][ T11] bridge_slave_1: left allmulticast mode [ 225.453047][ T11] bridge_slave_1: left promiscuous mode [ 225.455582][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.459505][ T11] bridge_slave_0: left allmulticast mode [ 225.461146][ T11] bridge_slave_0: left promiscuous mode [ 225.462786][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.016984][ T6399] Bluetooth: hci7: command tx timeout [ 227.110422][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.147132][ T5963] Bluetooth: hci4: command tx timeout [ 227.148685][ T6399] Bluetooth: hci5: command tx timeout [ 227.152780][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.199703][ T11] bond0 (unregistering): Released all slaves [ 227.204996][ T8563] team0: Port device team_slave_1 added [ 227.212161][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.214319][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.217037][ T6399] Bluetooth: hci2: command tx timeout [ 227.224510][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.273483][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.275496][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.291635][ T8563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.328858][ T8565] hsr_slave_0: entered promiscuous mode [ 227.381885][ T8565] hsr_slave_1: entered promiscuous mode [ 227.426982][ T8565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.431361][ T8565] Cannot create hsr debugfs directory [ 227.434473][ T8563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.436334][ T8563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.444317][ T8563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.472207][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.474634][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.488727][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.493595][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.495591][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.511069][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.809501][ T8558] hsr_slave_0: entered promiscuous mode [ 227.847198][ T8558] hsr_slave_1: entered promiscuous mode [ 227.886944][ T8558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.889312][ T8558] Cannot create hsr debugfs directory [ 228.021628][ T8568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.024953][ T8568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.097834][ T6399] Bluetooth: hci7: command tx timeout [ 228.101982][ T8563] hsr_slave_0: entered promiscuous mode [ 228.147363][ T8563] hsr_slave_1: entered promiscuous mode [ 228.197047][ T8563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.199308][ T8563] Cannot create hsr debugfs directory [ 228.293259][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.318450][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.450274][ T8568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.453141][ T8568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.508396][ T11] hsr_slave_0: left promiscuous mode [ 228.547757][ T11] hsr_slave_1: left promiscuous mode [ 228.627477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.629785][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.632510][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.634599][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.649533][ T11] veth1_macvtap: left promiscuous mode [ 228.651241][ T11] veth0_macvtap: left promiscuous mode [ 228.652722][ T11] veth1_vlan: left promiscuous mode [ 228.654228][ T11] veth0_vlan: left promiscuous mode [ 228.936144][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 229.217233][ T6399] Bluetooth: hci5: command tx timeout [ 229.219170][ T6399] Bluetooth: hci4: command tx timeout [ 230.177636][ T5963] Bluetooth: hci7: command tx timeout [ 231.052260][ T11] team0 (unregistering): Port device team_slave_1 removed [ 231.249254][ T11] team0 (unregistering): Port device team_slave_0 removed [ 233.780780][ T8568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.783633][ T8568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.794851][ T8655] team0: Device ipvlan1 failed to register rx_handler [ 233.933307][ T8568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.936232][ T8568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.274206][ T8565] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.285621][ T8568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 234.291709][ T8568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 234.333468][ T8568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.398967][ T8565] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.404283][ T8568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.508915][ T8565] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.617126][ T8565] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.486619][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.719106][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.731827][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.734085][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.748700][ T1925] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.750707][ T1925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.776720][ T8568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.795832][ T8568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.903051][ T2131] bridge_slave_1: left allmulticast mode [ 235.904574][ T2131] bridge_slave_1: left promiscuous mode [ 235.906203][ T2131] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.916075][ T2131] bridge_slave_0: left allmulticast mode [ 235.918054][ T2131] bridge_slave_0: left promiscuous mode [ 235.927171][ T2131] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.938828][ T2131] bridge_slave_1: left allmulticast mode [ 235.940339][ T2131] bridge_slave_1: left promiscuous mode [ 235.941989][ T2131] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.973938][ T2131] bridge_slave_0: left allmulticast mode [ 235.975661][ T2131] bridge_slave_0: left promiscuous mode [ 235.978470][ T2131] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.440547][ T2131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.477257][ T2131] bond_slave_0: left promiscuous mode [ 238.481006][ T2131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.517503][ T2131] bond_slave_1: left promiscuous mode [ 238.520715][ T2131] bond0 (unregistering): Released all slaves [ 239.279857][ T2131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.319479][ T2131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.383237][ T2131] bond0 (unregistering): Released all slaves [ 239.403147][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.483763][ T8565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.495682][ T8565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.603462][ T8563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.623755][ T8565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.628207][ T8565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.651333][ T8568] veth0_vlan: entered promiscuous mode [ 239.655948][ T8568] veth1_vlan: entered promiscuous mode [ 239.744935][ T8730] loop4: detected capacity change from 0 to 32768 [ 239.747559][ T8730] XFS: ikeep mount option is deprecated. [ 239.749042][ T8730] XFS: ikeep mount option is deprecated. [ 239.768397][ T8730] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.774854][ T8563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.813529][ T8730] XFS (loop4): Ending clean mount [ 239.917811][ T6672] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.992877][ T8563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.169886][ T8563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.197385][ T8745] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 240.203144][ T8568] veth0_macvtap: entered promiscuous mode [ 240.372858][ T8568] veth1_macvtap: entered promiscuous mode [ 240.384671][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.391859][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.394685][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.398053][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.400724][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.403353][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.406365][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.410497][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.413200][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.423649][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.431913][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.434941][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.444273][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.447674][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.451649][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.454898][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.458539][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.461403][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.465182][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.472782][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.480329][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.482268][ T6809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.550244][ T8568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.552632][ T8568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.555335][ T8568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.565277][ T8568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.713633][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.715647][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.917261][ T8563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.924090][ T8563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.102658][ T8563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.113453][ T8563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.260076][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.281189][ T2131] hsr_slave_0: left promiscuous mode [ 241.287328][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.307881][ T2131] hsr_slave_1: left promiscuous mode [ 241.397116][ T2131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.399332][ T2131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.402248][ T2131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.404226][ T2131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.410259][ T2131] hsr_slave_0: left promiscuous mode [ 241.467262][ T2131] hsr_slave_1: left promiscuous mode [ 241.557066][ T2131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.559192][ T2131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.562423][ T2131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.564403][ T2131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.589934][ T2131] veth1_macvtap: left promiscuous mode [ 241.591604][ T2131] veth0_macvtap: left promiscuous mode [ 241.593373][ T2131] veth1_vlan: left promiscuous mode [ 241.594792][ T2131] veth0_vlan: left promiscuous mode [ 241.597812][ T2131] veth1_macvtap: left promiscuous mode [ 241.599479][ T2131] veth0_macvtap: left promiscuous mode [ 241.601005][ T2131] veth1_vlan: left promiscuous mode [ 241.602577][ T2131] veth0_vlan: left promiscuous mode [ 243.663641][ T2131] team0 (unregistering): Port device team_slave_1 removed [ 243.858901][ T2131] team0 (unregistering): Port device team_slave_0 removed [ 248.231247][ T2131] team0 (unregistering): Port device team_slave_1 removed [ 248.432961][ T2131] team0 (unregistering): Port device team_slave_0 removed [ 248.817623][ T2334] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819518][ T2334] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.005904][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 251.036111][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.042739][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.267378][ T1938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.274068][ T8563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.283776][ T1938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.304638][ T8563] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.329291][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.331355][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.334341][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.336278][ T1938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.366299][ T8565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.432634][ T8563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.499708][ T8565] veth0_vlan: entered promiscuous mode [ 251.504749][ T8565] veth1_vlan: entered promiscuous mode [ 251.600486][ T8565] veth0_macvtap: entered promiscuous mode [ 251.604275][ T8565] veth1_macvtap: entered promiscuous mode [ 251.680292][ T8558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.698970][ T8558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.710173][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.712996][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.720539][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.723472][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.726316][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.736891][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.741034][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.744346][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.753277][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.756115][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.766229][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.779700][ T8565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.783185][ T8565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.788834][ T8565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.796294][ T8565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.799743][ T8565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.802401][ T8565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.804845][ T8565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.825249][ T8558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.840465][ T8558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.926291][ T8802] loop4: detected capacity change from 0 to 32768 [ 251.941104][ T8802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.578 (8802) [ 251.980865][ T8821] netlink: 9 bytes leftover after parsing attributes in process `syz.0.581'. [ 251.984418][ T8802] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.988355][ T8821] 0·: renamed from hsr_slave_1 (while UP) [ 251.997682][ T8802] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 252.002558][ T8821] 0·: entered allmulticast mode [ 252.004565][ T8821] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 252.011411][ T8802] BTRFS info (device loop4): using free-space-tree [ 252.161226][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.444569][ T8563] veth0_vlan: entered promiscuous mode [ 252.559949][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.613373][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.674806][ T8563] veth1_vlan: entered promiscuous mode [ 252.735835][ T6672] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.738677][ T6809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.738697][ T6809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.859226][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.902101][ T8563] veth0_macvtap: entered promiscuous mode [ 252.905521][ T8563] veth1_macvtap: entered promiscuous mode [ 253.508834][ T8863] netlink: 'syz.4.583': attribute type 10 has an invalid length. [ 253.620157][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.652810][ T8863] team0: Port device batadv0 added [ 253.656554][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.665535][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.674652][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.686942][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.689919][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.692787][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.700128][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.706929][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.709820][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.715038][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.748022][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.750963][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.753828][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.756581][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.764852][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.768203][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.770993][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.773700][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.784277][ T8563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.818212][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.820159][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.823162][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.825256][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.852859][ T8563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.855523][ T8563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.875165][ T8563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.886252][ T8563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.902206][ T8558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.905071][ T8558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.957032][ T8884] loop0: detected capacity change from 0 to 16 [ 253.971889][ T8884] erofs: (device loop0): mounted with root inode @ nid 36. [ 253.995675][ T8884] syz.0.588: attempt to access beyond end of device [ 253.995675][ T8884] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 255.282827][ T8915] loop0: detected capacity change from 0 to 512 [ 255.328392][ T8915] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.353504][ T8915] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.385904][ T8915] EXT4-fs (loop0): blocks per group (256) and clusters per group (32768) inconsistent [ 255.406456][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.516382][ T8902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.537251][ T8902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.281969][ T8558] veth0_vlan: entered promiscuous mode [ 256.292369][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.296494][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.322423][ T8558] veth1_vlan: entered promiscuous mode [ 256.337594][ T6445] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.413733][ T8558] veth0_macvtap: entered promiscuous mode [ 256.453430][ T8558] veth1_macvtap: entered promiscuous mode [ 256.483560][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.498490][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.507920][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.521073][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.529601][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.537330][ T6445] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.540633][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.550185][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.555305][ T6445] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 256.557821][ T6445] usb 1-1: config 0 has no interface number 0 [ 256.558565][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.559475][ T6445] usb 1-1: config 0 interface 156 has no altsetting 0 [ 256.564223][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.564245][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.568742][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.609242][ T6445] usb 1-1: New USB device found, idVendor=8750, idProduct=b9af, bcdDevice=a3.61 [ 256.612505][ T6445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.619741][ T6445] usb 1-1: Product: syz [ 256.620963][ T6445] usb 1-1: Manufacturer: syz [ 256.622158][ T6445] usb 1-1: SerialNumber: syz [ 256.637815][ T6445] usb 1-1: config 0 descriptor?? [ 256.651230][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.666964][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.676943][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.693052][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.697976][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.700907][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.716161][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.719414][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.722145][ T8558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.725122][ T8558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.739539][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.750008][ T8558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.762632][ T8558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.765112][ T8558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.772752][ T8558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.859649][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.891259][ T6445] usb 1-1: bad CDC descriptors [ 256.907106][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.909253][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.918604][ T6445] usb 1-1: USB disconnect, device number 5 [ 256.921713][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.931592][ T2131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.932093][ T8954] netlink: 'syz.4.600': attribute type 10 has an invalid length. [ 256.947852][ T2131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.977139][ T8954] macvlan0: entered promiscuous mode [ 256.978603][ T8954] macvlan0: entered allmulticast mode [ 256.994006][ T8954] veth1_vlan: entered allmulticast mode [ 257.001252][ T8954] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 257.012962][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 257.015372][ T8956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.600'. [ 257.342306][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 257.745886][ T9003] dccp_close: ABORT with 36 bytes unread [ 257.794565][ T9024] loop3: detected capacity change from 0 to 4096 [ 257.800848][ T9024] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 257.829555][ T9024] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 257.840737][ T9024] ntfs3: loop3: Failed to load $Extend (-22). [ 257.842464][ T9024] ntfs3: loop3: Failed to initialize $Extend. [ 257.927120][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 257.954781][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.027198][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.127022][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 258.129704][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.132910][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.135598][ T25] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 258.147049][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.155938][ T25] usb 1-1: config 0 descriptor?? [ 258.614458][ T9059] loop3: detected capacity change from 0 to 4096 [ 258.618937][ T9059] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 258.634424][ T9059] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 258.668508][ T9059] ntfs3: loop3: Failed to load $Extend (-22). [ 258.672607][ T9059] ntfs3: loop3: Failed to initialize $Extend. [ 258.974677][ T25] letsketch 0003:6161:4D15.0002: Device info: Д [ 259.175491][ T25] letsketch 0003:6161:4D15.0002: Device info: í—¶ [ 259.203183][ T9081] loop2: detected capacity change from 0 to 32768 [ 259.206712][ T9081] XFS: ikeep mount option is deprecated. [ 259.235837][ T9081] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 259.304809][ T9081] XFS (loop2): Ending clean mount [ 259.337343][ T9101] loop1: detected capacity change from 0 to 4096 [ 259.340271][ T9101] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 259.369905][ T9101] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 259.382998][ T25] letsketch 0003:6161:4D15.0002: Device info: Г [ 259.394001][ T8558] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 259.398365][ T9101] ntfs3: loop1: Failed to load $Extend (-22). [ 259.400251][ T9101] ntfs3: loop1: Failed to initialize $Extend. [ 259.823291][ T25] usb 1-1: Max retries (5) exceeded reading string descriptor 2 [ 259.826936][ T25] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -71 [ 259.871602][ T25] usb 1-1: USB disconnect, device number 6 [ 260.359566][ T9151] loop1: detected capacity change from 0 to 1024 [ 260.387347][ T9151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.463033][ T8563] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.881418][ T9198] overlayfs: missing 'lowerdir' [ 261.807195][ T6831] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.870680][ T9230] capability: warning: `syz.1.703' uses deprecated v2 capabilities in a way that may be insecure [ 262.027872][ T6831] usb 1-1: Using ep0 maxpacket: 32 [ 262.031672][ T6831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.040780][ T6831] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.048328][ T6831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.051102][ T6831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.055574][ T6831] usb 1-1: Product: syz [ 262.058335][ T6831] usb 1-1: Manufacturer: syz [ 262.061294][ T6831] usb 1-1: SerialNumber: syz [ 262.106284][ T9242] loop3: detected capacity change from 0 to 4096 [ 262.110679][ T9242] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 262.135707][ T9242] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 262.160020][ T9242] ntfs3: loop3: Failed to load $Extend (-22). [ 262.164324][ T9242] ntfs3: loop3: Failed to initialize $Extend. [ 262.313145][ T9255] warning: `syz.2.716' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 262.313202][ T6831] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 262.545476][ T6831] usb 1-1: USB disconnect, device number 7 [ 262.560253][ T6831] usblp0: removed [ 262.604658][ T9226] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 262.647052][ T9226] macvlan0: entered promiscuous mode [ 262.653176][ T9226] macvlan0: entered allmulticast mode [ 262.670896][ T9226] veth1_vlan: entered allmulticast mode [ 262.678083][ T9226] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 262.684237][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 262.690255][ T9263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.702'. [ 263.241593][ T9276] loop3: detected capacity change from 0 to 4096 [ 263.248030][ T9276] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 263.267897][ T9276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 263.312329][ T9276] ntfs3: loop3: Failed to load $Extend (-22). [ 263.318311][ T9276] ntfs3: loop3: Failed to initialize $Extend. [ 263.430275][ T9289] tipc: Started in network mode [ 263.435118][ T9289] tipc: Node identity 5a568bfbd23c, cluster identity 4711 [ 263.442948][ T9289] tipc: Enabled bearer , priority 10 [ 263.491474][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.604743][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 263.611613][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 263.657949][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.664460][ T9308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.687269][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.700353][ T9307] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 263.707185][ T9308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.748131][ T9307] macvlan0: entered promiscuous mode [ 263.751957][ T9307] macvlan0: entered allmulticast mode [ 263.773267][ T9307] veth1_vlan: entered allmulticast mode [ 263.785482][ T9307] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 263.799840][ T9308] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 263.846937][ T9308] macvlan0: entered promiscuous mode [ 263.850072][ T9308] macvlan0: entered allmulticast mode [ 263.872754][ T9308] veth1_vlan: entered allmulticast mode [ 263.881941][ T9308] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 263.890985][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 263.895303][ T9309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.739'. [ 263.905395][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 263.915991][ T9310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.738'. [ 264.562400][ T25] tipc: Node number set to 2288684027 [ 264.709722][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 265.014650][ T5963] Bluetooth: min 0 < 6 [ 265.254071][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 265.612020][ T9376] loop0: detected capacity change from 0 to 512 [ 265.617883][ T9376] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.624047][ T9376] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.629301][ T9376] EXT4-fs (loop0): blocks per group (256) and clusters per group (32768) inconsistent [ 265.919380][ T8808] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 266.100333][ T8808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.107951][ T8808] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 266.114994][ T8808] usb 1-1: config 0 has no interface number 0 [ 266.120725][ T8808] usb 1-1: config 0 interface 156 has no altsetting 0 [ 266.128092][ T8808] usb 1-1: New USB device found, idVendor=8750, idProduct=b9af, bcdDevice=a3.61 [ 266.130984][ T8808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.137853][ T8808] usb 1-1: Product: syz [ 266.140994][ T8808] usb 1-1: Manufacturer: syz [ 266.145037][ T8808] usb 1-1: SerialNumber: syz [ 266.154121][ T8808] usb 1-1: config 0 descriptor?? [ 266.220478][ T9411] loop3: detected capacity change from 0 to 16 [ 266.243193][ T9411] erofs: (device loop3): mounted with root inode @ nid 36. [ 266.255074][ T9411] syz.3.772: attempt to access beyond end of device [ 266.255074][ T9411] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 266.311744][ T9419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.337274][ T9419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.708581][ T9382] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 266.721311][ T9382] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 267.057174][ T5963] Bluetooth: hci2: command tx timeout [ 267.970217][ T9382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.973135][ T9382] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 268.008327][ T9479] loop2: detected capacity change from 0 to 16 [ 268.028218][ T9479] erofs: (device loop2): mounted with root inode @ nid 36. [ 268.043805][ T9479] syz.2.784: attempt to access beyond end of device [ 268.043805][ T9479] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 268.180328][ T9481] loop2: detected capacity change from 0 to 8192 [ 268.740019][ T9382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.741896][ T9382] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 268.748017][ T9481] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 268.756600][ T9481] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 268.780522][ T8808] usb 1-1: bad CDC descriptors [ 268.782827][ T9488] __nla_validate_parse: 6 callbacks suppressed [ 268.782840][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 268.786350][ T8808] usb 1-1: USB disconnect, device number 8 [ 268.810728][ T9481] REISERFS (device loop2): using ordered data mode [ 268.812677][ T9481] reiserfs: using flush barriers [ 268.826946][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 268.843536][ T9481] REISERFS warning (device loop2): sh-458 journal_init_dev: cannot init journal device unknown-block(7,2): -16 [ 268.863727][ T9481] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device [ 268.877630][ T9481] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 270.616955][ T9514] delete_channel: no stack [ 270.833835][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.842185][ T5963] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.867323][ T9382] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 270.879310][ T9382] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 270.888177][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.907720][ T9503] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 271.037479][ T9503] macvlan0: entered promiscuous mode [ 271.045242][ T9503] macvlan0: entered allmulticast mode [ 271.058472][ T9503] veth1_vlan: entered allmulticast mode [ 271.082364][ T9503] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 271.098228][ T9525] loop3: detected capacity change from 0 to 16 [ 271.117281][ T9525] erofs: (device loop3): mounted with root inode @ nid 36. [ 271.130280][ T9525] syz.3.796: attempt to access beyond end of device [ 271.130280][ T9525] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 271.134399][ T9523] loop0: detected capacity change from 0 to 4096 [ 271.140598][ T9382] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 271.147221][ T9382] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 271.152910][ T9523] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 271.202064][ T9523] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 271.224009][ T9523] ntfs3: loop0: Failed to load $Extend (-22). [ 271.229892][ T9523] ntfs3: loop0: Failed to initialize $Extend. [ 271.361944][ T9542] loop2: detected capacity change from 0 to 512 [ 271.402268][ T9542] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.408745][ T9542] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.411240][ T9542] EXT4-fs (loop2): blocks per group (256) and clusters per group (32768) inconsistent [ 271.429728][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.462235][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.152926][ T9556] loop1: detected capacity change from 0 to 1024 [ 272.180239][ T9556] hfsplus: failed to load root directory [ 272.346060][ T9569] loop0: detected capacity change from 0 to 16 [ 272.356410][ T9569] erofs: (device loop0): mounted with root inode @ nid 36. [ 272.472616][ T9573] loop1: detected capacity change from 0 to 4096 [ 272.475321][ T9573] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 272.484581][ T9573] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 272.522809][ T9573] ntfs3: loop1: Failed to load $Extend (-22). [ 272.526729][ T9573] ntfs3: loop1: Failed to initialize $Extend. [ 273.600218][ T9577] loop1: detected capacity change from 0 to 32768 [ 273.605713][ T9577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.812 (9577) [ 273.623089][ T9577] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.626988][ T9591] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 273.627186][ T9577] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 273.631415][ T9577] BTRFS info (device loop1): using free-space-tree [ 273.709039][ T8563] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.750188][ T9613] netlink: 188 bytes leftover after parsing attributes in process `syz.0.817'. [ 273.802285][ T9616] loop0: detected capacity change from 0 to 16 [ 273.819648][ T9616] erofs: (device loop0): mounted with root inode @ nid 36. [ 273.959003][ T9622] loop0: detected capacity change from 0 to 4096 [ 273.969748][ T9622] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 273.991342][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 273.992276][ T9622] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 274.035793][ T9622] ntfs3: loop0: Failed to load $Extend (-22). [ 274.037987][ T9622] ntfs3: loop0: Failed to initialize $Extend. [ 274.324708][ T9640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.349278][ T9645] loop3: detected capacity change from 0 to 16 [ 274.351960][ T9645] erofs: (device loop3): mounted with root inode @ nid 36. [ 274.387166][ T9640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.390941][ T6444] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 274.470518][ T9638] loop4: detected capacity change from 0 to 32768 [ 274.480666][ T9638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.829 (9638) [ 274.501146][ T9638] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.503985][ T9638] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 274.506479][ T9638] BTRFS info (device loop4): using free-space-tree [ 274.522092][ T9653] loop3: detected capacity change from 0 to 256 [ 274.571105][ T6444] usb 1-1: Using ep0 maxpacket: 32 [ 274.576008][ T6444] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.580730][ T6444] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 274.594732][ T6444] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 274.597387][ T6444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.599608][ T6444] usb 1-1: Product: syz [ 274.600730][ T6444] usb 1-1: Manufacturer: syz [ 274.601957][ T6444] usb 1-1: SerialNumber: syz [ 274.652983][ T6672] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.655288][ T9667] loop2: detected capacity change from 0 to 4096 [ 274.667972][ T9667] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 274.695851][ T9667] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 274.735355][ T9667] ntfs3: loop2: Failed to load $Extend (-22). [ 274.752560][ T9667] ntfs3: loop2: Failed to initialize $Extend. [ 274.869242][ T6444] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 275.003025][ T9684] loop2: detected capacity change from 0 to 512 [ 275.005419][ T9684] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.008889][ T9684] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.011552][ T9684] EXT4-fs (loop2): blocks per group (256) and clusters per group (32768) inconsistent [ 275.035707][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.055544][ T6444] usb 1-1: USB disconnect, device number 9 [ 275.066297][ T6444] usblp0: removed [ 275.090943][ T9633] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 275.099788][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.114406][ T9633] veth1_vlan: left allmulticast mode [ 275.177603][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 275.180169][ T9694] netlink: 48 bytes leftover after parsing attributes in process `syz.0.826'. [ 275.375637][ T9690] loop1: detected capacity change from 0 to 32768 [ 275.402355][ T9690] [ 275.402355][ T9690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.402355][ T9690] [ 275.432799][ T9704] loop4: detected capacity change from 0 to 4096 [ 275.435459][ T9704] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 275.438728][ T8563] [ 275.438728][ T8563] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.438728][ T8563] [ 275.452402][ T8563] [ 275.452402][ T8563] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.452402][ T8563] [ 275.510958][ T9704] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 275.526654][ T9704] ntfs3: loop4: Failed to load $Extend (-22). [ 275.530575][ T9704] ntfs3: loop4: Failed to initialize $Extend. [ 276.418740][ T9717] loop3: detected capacity change from 0 to 512 [ 276.474043][ T9717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.559616][ T8565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.926216][ T9740] loop3: detected capacity change from 0 to 4096 [ 276.938479][ T9740] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 276.966341][ T9740] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 276.982882][ T6831] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 277.003501][ T9740] ntfs3: loop3: Failed to load $Extend (-22). [ 277.007570][ T9740] ntfs3: loop3: Failed to initialize $Extend. [ 277.051529][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.098965][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.114005][ T9747] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 277.119943][ T9747] veth1_vlan: left allmulticast mode [ 277.167161][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 277.172067][ T9747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.866'. [ 277.179950][ T6831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 277.185859][ T6831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.189551][ T6831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.193708][ T6831] usb 1-1: Product: syz [ 277.195102][ T6831] usb 1-1: Manufacturer: syz [ 277.196473][ T6831] usb 1-1: SerialNumber: syz [ 277.301389][ T9761] loop3: detected capacity change from 0 to 128 [ 277.572760][ T9763] syz.3.872: attempt to access beyond end of device [ 277.572760][ T9763] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 277.581670][ T9763] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 277.585043][ T9763] syz.3.872: attempt to access beyond end of device [ 277.585043][ T9763] loop3: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 277.589057][ T9763] Buffer I/O error on dev loop3, logical block 8833403, async page read [ 277.591677][ T9763] syz.3.872: attempt to access beyond end of device [ 277.591677][ T9763] loop3: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 277.595558][ T9763] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 277.603265][ T9763] syz.3.872: attempt to access beyond end of device [ 277.603265][ T9763] loop3: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 277.607323][ T9763] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 277.610503][ T9763] syz.3.872: attempt to access beyond end of device [ 277.610503][ T9763] loop3: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 277.614573][ T9763] Buffer I/O error on dev loop3, logical block 3245771, async page read [ 277.623490][ T9763] syz.3.872: attempt to access beyond end of device [ 277.623490][ T9763] loop3: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 277.628174][ T9763] Buffer I/O error on dev loop3, logical block 8834171, async page read [ 277.630616][ T9763] syz.3.872: attempt to access beyond end of device [ 277.630616][ T9763] loop3: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 277.635017][ T9763] Buffer I/O error on dev loop3, logical block 13466417, async page read [ 277.637845][ T9763] syz.3.872: attempt to access beyond end of device [ 277.637845][ T9763] loop3: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 277.641628][ T9763] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 277.644306][ T9763] syz.3.872: attempt to access beyond end of device [ 277.644306][ T9763] loop3: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 277.650681][ T9763] Buffer I/O error on dev loop3, logical block 3245774, async page read [ 277.653193][ T9763] syz.3.872: attempt to access beyond end of device [ 277.653193][ T9763] loop3: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 277.657594][ T9763] Buffer I/O error on dev loop3, logical block 8834939, async page read [ 277.835411][ T6831] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 277.837334][ T6831] cdc_ncm 1-1:1.0: bind() failure [ 277.840590][ T6831] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 277.842537][ T6831] cdc_ncm 1-1:1.1: bind() failure [ 278.025627][ T9769] dvmrp0: entered allmulticast mode [ 279.131874][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.183025][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.189392][ T9791] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 279.202824][ T9791] veth1_vlan: left allmulticast mode [ 279.259793][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 279.273956][ T9797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.883'. [ 279.330100][ T9801] loop4: detected capacity change from 0 to 512 [ 279.335341][ T9801] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.340439][ T9801] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.345010][ T9801] EXT4-fs (loop4): blocks per group (256) and clusters per group (32768) inconsistent [ 279.354302][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.390301][ T6831] usb 1-1: USB disconnect, device number 10 [ 279.408473][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.482140][ T9817] ------------[ cut here ]------------ [ 280.484154][ T9817] WARNING: CPU: 1 PID: 9817 at net/ipv4/route.c:1241 ip_rt_bug+0x34/0x108 [ 280.486595][ T9817] Modules linked in: [ 280.487691][ T9817] CPU: 1 UID: 0 PID: 9817 Comm: syz.4.893 Not tainted 6.11.0-rc3-syzkaller-g7c626ce4bae1 #0 [ 280.490510][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 280.493557][ T9817] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 280.495719][ T9817] pc : ip_rt_bug+0x34/0x108 [ 280.496978][ T9817] lr : ip_rt_bug+0x34/0x108 [ 280.498186][ T9817] sp : ffff800099026d00 [ 280.499451][ T9817] x29: ffff800099026d00 x28: 1ffff00013204de0 x27: ffff0000c9b8a8c0 [ 280.501663][ T9817] x26: dfff800000000000 x25: 1fffe00019371523 x24: dfff800000000000 [ 280.503950][ T9817] x23: ffff0000c9205a00 x22: ffff0000c9205a30 x21: ffff0000c30b2080 [ 280.506220][ T9817] x20: ffff0000c9b8a8c0 x19: ffff0000c9b8a8c0 x18: ffff8000990269e0 [ 280.508547][ T9817] x17: 00000000000473bb x16: ffff800080345098 x15: 0000000000000001 [ 280.510826][ T9817] x14: 1ffff00011fbbe06 x13: 0000000000000000 x12: 0000000000000003 [ 280.513013][ T9817] x11: 0000000000040000 x10: 0000000000000003 x9 : 08091c0ef0021b00 [ 280.515433][ T9817] x8 : 08091c0ef0021b00 x7 : ffff8000800603b4 x6 : ffff8000800605b0 [ 280.517760][ T9817] x5 : ffff0000f882bad8 x4 : ffff800099026a48 x3 : 0000000000000000 [ 280.519976][ T9817] x2 : 0000000000000002 x1 : ffff80008b462a00 x0 : 0000000000000001 [ 280.522159][ T9817] Call trace: [ 280.523062][ T9817] ip_rt_bug+0x34/0x108 [ 280.524201][ T9817] ip_send_skb+0x134/0x2f8 [ 280.525410][ T9817] ip_push_pending_frames+0x6c/0x88 [ 280.526872][ T9817] icmp_push_reply+0x2e4/0x3c0 [ 280.528176][ T9817] __icmp_send+0xbc8/0x1074 [ 280.529437][ T9817] ip_options_compile+0xe4/0x170 [ 280.530859][ T9817] ip_rcv_finish_core+0xbd4/0x18e8 [ 280.532315][ T9817] ip_rcv_finish+0x12c/0x24c [ 280.533552][ T9817] NF_HOOK+0x328/0x3d4 [ 280.534677][ T9817] ip_rcv+0x7c/0x9c [ 280.535843][ T9817] __netif_receive_skb+0x18c/0x3c8 [ 280.537322][ T9817] netif_receive_skb+0x1f0/0x93c [ 280.538843][ T9817] tun_rx_batched+0x568/0x6e4 [ 280.540150][ T9817] tun_get_user+0x2648/0x3adc [ 280.541468][ T9817] tun_chr_write_iter+0xfc/0x204 [ 280.542802][ T9817] vfs_write+0x940/0xc80 [ 280.544005][ T9817] ksys_write+0x15c/0x26c [ 280.545225][ T9817] __arm64_sys_write+0x7c/0x90 [ 280.546631][ T9817] invoke_syscall+0x98/0x2b8 [ 280.547955][ T9817] el0_svc_common+0x130/0x23c [ 280.549257][ T9817] do_el0_svc+0x48/0x58 [ 280.550407][ T9817] el0_svc+0x54/0x168 [ 280.551555][ T9817] el0t_64_sync_handler+0x84/0xfc [ 280.552950][ T9817] el0t_64_sync+0x190/0x194 [ 280.554219][ T9817] irq event stamp: 189 [ 280.555427][ T9817] hardirqs last enabled at (188): [] kasan_quarantine_put+0x1a0/0x1c8 [ 280.558302][ T9817] hardirqs last disabled at (189): [] el1_dbg+0x24/0x80 [ 280.560874][ T9817] softirqs last enabled at (68): [] local_bh_enable+0x10/0x34 [ 280.563520][ T9817] softirqs last disabled at (70): [] local_bh_disable+0x10/0x34 [ 280.566032][ T9817] ---[ end trace 0000000000000000 ]---