last executing test programs: 14.075914844s ago: executing program 4 (id=558): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x0, &(0x7f0000000340)='errors=continue') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 13.789712916s ago: executing program 4 (id=563): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) 13.695699461s ago: executing program 4 (id=567): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000180)=';\xad~\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 11.939989271s ago: executing program 4 (id=581): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000001640)={0x0, 0xe, 0x0}, 0x0) 10.775900773s ago: executing program 4 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE}}, 0x7) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="ed", 0x1}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x10, 0x84, 0x8}}], 0x10}}], 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r3, 0x0, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) 5.786725933s ago: executing program 1 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc1105511, &(0x7f0000000280)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}}) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40045b17, 0x0) 4.570985013s ago: executing program 2 (id=620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) 4.507221982s ago: executing program 0 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x2, 0x0) 3.637466401s ago: executing program 1 (id=623): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1}, @in=@multicast2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0200002100010025bd700000000000ffffffff000000000000000000000000ac14142e00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc0111"], 0x21c}}, 0x0) 3.569130031s ago: executing program 2 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.533125817s ago: executing program 3 (id=625): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat(r1, &(0x7f00000001c0)='./bus\x00', r1, &(0x7f0000000180)='./bus\x00') 3.519748909s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 3.466058826s ago: executing program 1 (id=627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 3.329148487s ago: executing program 3 (id=628): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000180)=';\xad~\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, &(0x7f00000000c0)=0x5) setuid(r4) r5 = pidfd_getfd(r2, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setns(r5, 0x20000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) recvmmsg(r7, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x5) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) 2.288496302s ago: executing program 2 (id=631): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) 2.284374862s ago: executing program 3 (id=632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x0, &(0x7f0000000340)='errors=continue') socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 2.23139218s ago: executing program 1 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc1105511, &(0x7f0000000280)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}}) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40045b17, 0x0) 2.099847789s ago: executing program 3 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setresuid(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000010c0), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x2, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) 1.28251599s ago: executing program 2 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.229473058s ago: executing program 0 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x2, 0x0) 1.120522194s ago: executing program 3 (id=637): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x90, 0x8c, 0x44, 0x40, 0x2040, 0x4902, 0x70a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xe6, 0x3d}}]}}]}}, 0x0) 1.053433364s ago: executing program 2 (id=638): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@delpolicy={0x64, 0x14, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@dev}}, [@mark={0xc}, @XFRMA_IF_ID={0x8}]}, 0x64}}, 0x0) 1.037394697s ago: executing program 2 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000180), 0x200, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 404.064171ms ago: executing program 0 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 234.303416ms ago: executing program 1 (id=642): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0xffffffffffffff62, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0) 96.253606ms ago: executing program 1 (id=643): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000180)=';\xad~\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): y exists on: batadv_slave_1 [ 44.577920][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.581325][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.583844][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.587276][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.599332][ T3975] device veth0_macvtap entered promiscuous mode [ 44.602519][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.604979][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.607535][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.612087][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.614715][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.625416][ T3975] device veth1_macvtap entered promiscuous mode [ 44.625887][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.629000][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.632008][ T3969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.634139][ T3969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.636317][ T3969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.638494][ T3969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.657787][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.660947][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.668564][ T3975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.685275][ T3975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.687951][ T3975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.691777][ T3975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.694243][ T3975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.696834][ T3975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.701654][ T3975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.727830][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.731577][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.737820][ T3975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.741150][ T3975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.743706][ T3975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.746326][ T3975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.748762][ T3975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.754774][ T3975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.758449][ T3975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.766827][ T3975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.769352][ T3975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.772818][ T3975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.774970][ T3975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.814178][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.816748][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.866313][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.868886][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.880292][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.882592][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.887449][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.889861][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.898867][ T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.906252][ T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.909286][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.910173][ T3978] device veth0_vlan entered promiscuous mode [ 44.911741][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.915799][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.922113][ T3978] device veth1_vlan entered promiscuous mode [ 44.924598][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.926974][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.980830][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.982929][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.007133][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.007265][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.012114][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.027878][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.032132][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.037308][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.052973][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.055359][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.057861][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.062553][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.066344][ T3978] device veth0_macvtap entered promiscuous mode [ 45.074350][ T3978] device veth1_macvtap entered promiscuous mode [ 45.115670][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.117731][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.123784][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.126184][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.128580][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.130800][ T4023] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.172657][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.175303][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.177701][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.194769][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.197282][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.213813][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.225882][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.228551][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.246044][ T3978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.254664][ T4055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.257410][ T4055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.276937][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.292239][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.294651][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.297071][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.307362][ T4064] loop2: detected capacity change from 0 to 512 [ 45.310493][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.313088][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.316173][ T3978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.318786][ T3978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.328338][ T4064] EXT4-fs (loop2): Ignoring removed oldalloc option [ 45.329537][ T3978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.363381][ T4057] loop1: detected capacity change from 0 to 8192 [ 45.367109][ T4064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.7: Parent and EA inode have the same ino 15 [ 45.373592][ T4065] team0: Port device team_slave_0 removed [ 45.377965][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.378183][ T4064] EXT4-fs (loop2): Remounting filesystem read-only [ 45.382795][ T4023] usb 1-1: Using ep0 maxpacket: 16 [ 45.384359][ T4064] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.384474][ T4064] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.7: couldn't truncate inode 15 (err -30) [ 45.386435][ T4064] EXT4-fs (loop2): 1 orphan inode deleted [ 45.392829][ T4064] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 45.399337][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.414269][ T4057] ======================================================= [ 45.414269][ T4057] WARNING: The mand mount option has been deprecated and [ 45.414269][ T4057] and is ignored by this kernel. Remove the mand [ 45.414269][ T4057] option from the mount to silence this warning. [ 45.414269][ T4057] ======================================================= [ 45.420748][ T4064] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.7: deleted inode referenced: 15 [ 45.431927][ T3978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.434112][ T3978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.436429][ T3978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.438546][ T3978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.443244][ T4064] EXT4-fs (loop2): Remounting filesystem read-only [ 45.473054][ T4057] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.487516][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 45.496536][ T4057] 9pnet: Insufficient options for proto=fd [ 45.511466][ T4069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 45.518113][ T4057] 9pnet: Insufficient options for proto=fd [ 45.520620][ T4023] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 45.523497][ T4023] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 45.525896][ T4023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.548250][ T4023] usb 1-1: config 0 descriptor?? [ 45.650454][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.652593][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.657254][ T4071] udc-core: couldn't find an available UDC or it's busy [ 45.659121][ T4071] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.662221][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.702092][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.704171][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.707118][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.779521][ T4078] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 45.785269][ T4054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 45.851715][ T4084] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 45.938317][ T4091] udc-core: couldn't find an available UDC or it's busy [ 45.941610][ T4091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.946627][ T4091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 45.973037][ T4091] udc-core: couldn't find an available UDC or it's busy [ 45.976342][ T4091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.979933][ T4091] udc-core: couldn't find an available UDC or it's busy [ 45.984467][ T4091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.131876][ T4054] udc-core: couldn't find an available UDC or it's busy [ 46.133869][ T4054] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.137072][ T4054] udc-core: couldn't find an available UDC or it's busy [ 46.139225][ T4054] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.154149][ T4023] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 46.156027][ T4023] hid-generic 0003:0158:0100.0001: unexpected long global item [ 46.158855][ T4023] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 46.241708][ T4098] udc-core: couldn't find an available UDC or it's busy [ 46.243928][ T4098] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.252580][ T4098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 46.267899][ T4098] udc-core: couldn't find an available UDC or it's busy [ 46.270430][ T4098] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.364410][ T4023] usb 1-1: USB disconnect, device number 2 [ 46.411267][ T4045] Bluetooth: hci4: command 0x040f tx timeout [ 46.412863][ T4045] Bluetooth: hci3: command 0x040f tx timeout [ 46.414711][ T4045] Bluetooth: hci1: command 0x040f tx timeout [ 46.416700][ T4045] Bluetooth: hci0: command 0x040f tx timeout [ 46.419654][ T4045] Bluetooth: hci2: command 0x040f tx timeout [ 46.565325][ T4101] syz.1.17 (4101): attempted to duplicate a private mapping with mremap. This is not supported. [ 46.681028][ T4103] loop2: detected capacity change from 0 to 8192 [ 46.786825][ T4103] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.799125][ T4103] 9pnet: Insufficient options for proto=fd [ 46.809015][ T4103] 9pnet: Insufficient options for proto=fd [ 46.949837][ T4111] loop3: detected capacity change from 0 to 512 [ 47.017830][ T4111] EXT4-fs (loop3): Ignoring removed oldalloc option [ 47.040303][ T4111] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.21: Parent and EA inode have the same ino 15 [ 47.047539][ T4111] EXT4-fs (loop3): Remounting filesystem read-only [ 47.049486][ T4111] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.21: couldn't truncate inode 15 (err -30) [ 47.056731][ T4119] team0: Port device team_slave_0 removed [ 47.058104][ T4111] EXT4-fs (loop3): 1 orphan inode deleted [ 47.064910][ T4111] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 47.101348][ T4111] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.21: deleted inode referenced: 15 [ 47.121621][ T4111] EXT4-fs (loop3): Remounting filesystem read-only [ 47.141218][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 47.268204][ T4128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.29'. [ 47.287350][ T4130] loop0: detected capacity change from 0 to 8192 [ 47.312469][ T4135] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 47.323327][ T4135] team0: Port device netdevsim0 added [ 47.355433][ T4130] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.501727][ T4148] udc-core: couldn't find an available UDC or it's busy [ 47.504859][ T4148] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.533096][ T4150] netlink: 272 bytes leftover after parsing attributes in process `syz.4.39'. [ 47.604164][ T4154] loop4: detected capacity change from 0 to 512 [ 47.632951][ T4154] EXT4-fs (loop4): Ignoring removed oldalloc option [ 47.646867][ T4154] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.42: Parent and EA inode have the same ino 15 [ 47.666482][ T4154] EXT4-fs (loop4): Remounting filesystem read-only [ 47.677443][ T4154] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.42: couldn't truncate inode 15 (err -30) [ 47.696064][ T4154] EXT4-fs (loop4): 1 orphan inode deleted [ 47.697580][ T4154] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 47.709695][ T4154] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.42: deleted inode referenced: 15 [ 47.717336][ T4154] EXT4-fs (loop4): Remounting filesystem read-only [ 47.719948][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 47.764639][ T4171] udc-core: couldn't find an available UDC or it's busy [ 47.766583][ T4171] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.823465][ T4173] udc-core: couldn't find an available UDC or it's busy [ 47.825482][ T4173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.830546][ T4173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 47.913996][ T4173] udc-core: couldn't find an available UDC or it's busy [ 47.918130][ T4173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.921983][ T4173] udc-core: couldn't find an available UDC or it's busy [ 47.926289][ T4173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.990110][ T4055] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 48.161745][ T4178] loop2: detected capacity change from 0 to 8192 [ 48.218800][ T4178] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.230245][ T4055] usb 1-1: Using ep0 maxpacket: 16 [ 48.313680][ T4185] udc-core: couldn't find an available UDC or it's busy [ 48.315574][ T4185] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.351792][ T4185] udc-core: couldn't find an available UDC or it's busy [ 48.355228][ T4185] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.357785][ T4185] udc-core: couldn't find an available UDC or it's busy [ 48.359817][ T4185] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.491527][ T4045] Bluetooth: hci2: command 0x0419 tx timeout [ 48.493281][ T4045] Bluetooth: hci0: command 0x0419 tx timeout [ 48.494873][ T4045] Bluetooth: hci1: command 0x0419 tx timeout [ 48.497293][ T4045] Bluetooth: hci3: command 0x0419 tx timeout [ 48.499330][ T4045] Bluetooth: hci4: command 0x0419 tx timeout [ 48.510425][ T4055] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 48.512797][ T4055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.514901][ T4055] usb 1-1: Product: syz [ 48.516003][ T4055] usb 1-1: Manufacturer: syz [ 48.517122][ T4055] usb 1-1: SerialNumber: syz [ 48.541724][ T4055] usb 1-1: config 0 descriptor?? [ 48.658034][ T4203] loop2: detected capacity change from 0 to 512 [ 48.748135][ T4203] EXT4-fs (loop2): Ignoring removed oldalloc option [ 48.755620][ T4203] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.60: Parent and EA inode have the same ino 15 [ 48.759160][ T4203] EXT4-fs (loop2): Remounting filesystem read-only [ 48.761583][ T4203] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.60: couldn't truncate inode 15 (err -30) [ 48.767994][ T4203] EXT4-fs (loop2): 1 orphan inode deleted [ 48.769544][ T4203] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 48.778259][ T4203] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.60: deleted inode referenced: 15 [ 48.784975][ T4203] EXT4-fs (loop2): Remounting filesystem read-only [ 48.800623][ T4055] usb 1-1: Limiting number of CPorts to U8_MAX [ 48.803613][ T4055] usb 1-1: Not enough endpoints found in device, aborting! [ 49.005361][ T4023] usb 1-1: USB disconnect, device number 3 [ 49.039920][ T4208] device syzkaller0 entered promiscuous mode [ 49.444920][ T4218] loop2: detected capacity change from 0 to 8192 [ 49.500709][ T4218] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.682239][ T4233] loop1: detected capacity change from 0 to 512 [ 49.722574][ T4233] EXT4-fs (loop1): Ignoring removed oldalloc option [ 49.729091][ T4233] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.72: Parent and EA inode have the same ino 15 [ 49.736692][ T4233] EXT4-fs (loop1): Remounting filesystem read-only [ 49.753306][ T4233] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.72: couldn't truncate inode 15 (err -30) [ 49.782450][ T4233] EXT4-fs (loop1): 1 orphan inode deleted [ 49.784119][ T4233] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 50.555314][ T4233] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.72: deleted inode referenced: 15 [ 50.575970][ T4233] EXT4-fs (loop1): Remounting filesystem read-only [ 50.578722][ T4233] __nla_validate_parse: 3 callbacks suppressed [ 50.578744][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 50.809858][ T4255] loop1: detected capacity change from 0 to 256 [ 51.130602][ T4268] udc-core: couldn't find an available UDC or it's busy [ 51.132503][ T4268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.966723][ T4265] loop0: detected capacity change from 0 to 8192 [ 52.026348][ T4265] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.940223][ T4246] loop2: detected capacity change from 0 to 40427 [ 52.975218][ T4283] loop3: detected capacity change from 0 to 512 [ 53.024791][ T4246] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 53.026888][ T4246] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 53.029319][ T4287] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 53.036607][ T4283] EXT4-fs (loop3): Ignoring removed oldalloc option [ 53.077846][ T4283] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.91: Parent and EA inode have the same ino 15 [ 53.083808][ T4246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.105399][ T4283] EXT4-fs (loop3): Remounting filesystem read-only [ 53.107148][ T4283] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.91: couldn't truncate inode 15 (err -30) [ 53.134624][ T4287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 53.138538][ T4283] EXT4-fs (loop3): 1 orphan inode deleted [ 53.162298][ T4283] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 53.179831][ T4283] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.91: deleted inode referenced: 15 [ 53.206998][ T4283] EXT4-fs (loop3): Remounting filesystem read-only [ 53.209763][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 53.268618][ T4246] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 53.270795][ T4246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.400828][ T3969] attempt to access beyond end of device [ 53.400828][ T3969] loop2: rw=2049, want=40968, limit=40427 [ 53.634025][ T4317] loop3: detected capacity change from 0 to 8192 [ 53.686552][ T4317] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.903876][ T4330] loop1: detected capacity change from 0 to 512 [ 53.939425][ T4330] EXT4-fs (loop1): Ignoring removed oldalloc option [ 53.954554][ T4330] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.109: Parent and EA inode have the same ino 15 [ 53.972487][ T4330] EXT4-fs (loop1): Remounting filesystem read-only [ 53.974249][ T4330] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.109: couldn't truncate inode 15 (err -30) [ 53.985322][ T4330] EXT4-fs (loop1): 1 orphan inode deleted [ 53.986884][ T4330] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 54.026060][ T4330] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.109: deleted inode referenced: 15 [ 54.036136][ T4333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'. [ 54.060632][ T4330] EXT4-fs (loop1): Remounting filesystem read-only [ 54.063335][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 54.085622][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.241748][ T4347] udc-core: couldn't find an available UDC or it's busy [ 54.244293][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.252867][ T4347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.267600][ T4347] udc-core: couldn't find an available UDC or it's busy [ 54.269447][ T4347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.274158][ T4345] loop3: detected capacity change from 0 to 4096 [ 54.476939][ T4347] udc-core: couldn't find an available UDC or it's busy [ 54.479255][ T4347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.826781][ T4345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.832779][ T4342] device bridge_slave_1 left promiscuous mode [ 54.844444][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.876769][ T4354] udc-core: couldn't find an available UDC or it's busy [ 54.878665][ T4354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.912865][ T4356] udc-core: couldn't find an available UDC or it's busy [ 54.914840][ T4356] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.008309][ T4360] udc-core: couldn't find an available UDC or it's busy [ 55.010523][ T4360] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.146940][ T4362] loop0: detected capacity change from 0 to 8192 [ 55.228142][ T4362] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.566654][ T4372] loop4: detected capacity change from 0 to 512 [ 55.609854][ T4372] EXT4-fs (loop4): Ignoring removed oldalloc option [ 55.631724][ T4372] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.125: Parent and EA inode have the same ino 15 [ 55.669876][ T4372] EXT4-fs (loop4): Remounting filesystem read-only [ 55.671874][ T4372] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.125: couldn't truncate inode 15 (err -30) [ 55.672560][ T1528] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 55.761915][ T4372] EXT4-fs (loop4): 1 orphan inode deleted [ 55.763588][ T4372] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 55.813538][ T4372] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.125: deleted inode referenced: 15 [ 55.828786][ T4372] EXT4-fs (loop4): Remounting filesystem read-only [ 55.831630][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 55.836264][ T4392] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.133'. [ 55.988697][ T4390] loop2: detected capacity change from 0 to 8192 [ 56.090487][ T1528] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.093106][ T1528] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.095395][ T1528] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 56.097834][ T1528] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 56.104032][ T4390] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.121281][ T1528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.160357][ T4364] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.183738][ T1528] hub 1-1:1.0: bad descriptor, ignoring hub [ 56.185247][ T1528] hub: probe of 1-1:1.0 failed with error -5 [ 56.187328][ T1528] cdc_wdm 1-1:1.0: skipping garbage [ 56.188640][ T1528] cdc_wdm 1-1:1.0: skipping garbage [ 56.196457][ T1528] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 56.197979][ T1528] cdc_wdm 1-1:1.0: Unknown control protocol [ 56.215553][ T4420] loop4: detected capacity change from 0 to 512 [ 56.255647][ T4420] EXT4-fs (loop4): Ignoring removed oldalloc option [ 56.270510][ T4420] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.147: Parent and EA inode have the same ino 15 [ 56.289907][ T4420] EXT4-fs (loop4): Remounting filesystem read-only [ 56.292292][ T4420] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.147: couldn't truncate inode 15 (err -30) [ 56.306181][ T4420] EXT4-fs (loop4): 1 orphan inode deleted [ 56.307914][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 56.370721][ T4420] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.147: deleted inode referenced: 15 [ 56.374928][ T4420] EXT4-fs (loop4): Remounting filesystem read-only [ 56.390841][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 56.510520][ T1528] usb 1-1: USB disconnect, device number 4 [ 56.544368][ T4444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 56.627530][ T4443] loop3: detected capacity change from 0 to 8192 [ 56.658319][ T4448] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 56.674254][ T4443] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.739049][ T4456] syz.2.165 uses obsolete (PF_INET,SOCK_PACKET) [ 56.748949][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 56.792718][ T4454] device team0 entered promiscuous mode [ 56.794228][ T4454] device team_slave_0 entered promiscuous mode [ 56.796021][ T4454] device team_slave_1 entered promiscuous mode [ 56.839219][ T4454] team0: Port device team_slave_0 removed [ 56.860375][ T4025] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 56.875676][ T4451] device team0 left promiscuous mode [ 56.877321][ T4451] device team_slave_1 left promiscuous mode [ 56.974394][ T4470] netlink: 'syz.1.171': attribute type 13 has an invalid length. [ 56.976588][ T4470] netlink: 152 bytes leftover after parsing attributes in process `syz.1.171'. [ 56.991636][ T4470] syz_tun: refused to change device tx_queue_len [ 56.993278][ T4470] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 57.000853][ T4466] loop4: detected capacity change from 0 to 512 [ 57.070201][ T4466] EXT4-fs (loop4): Ignoring removed oldalloc option [ 57.106808][ T4466] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.169: Parent and EA inode have the same ino 15 [ 57.113295][ T4466] EXT4-fs (loop4): Remounting filesystem read-only [ 57.113318][ T4476] loop3: detected capacity change from 0 to 8192 [ 57.114979][ T4466] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.169: couldn't truncate inode 15 (err -30) [ 57.122073][ T4466] EXT4-fs (loop4): 1 orphan inode deleted [ 57.123504][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 57.138428][ T4466] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.169: deleted inode referenced: 15 [ 57.142688][ T4466] EXT4-fs (loop4): Remounting filesystem read-only [ 57.145623][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 57.156430][ T4476] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.176182][ T4482] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.176'. [ 57.267683][ T4025] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.272607][ T4025] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.274846][ T4025] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 57.277377][ T4025] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 57.286630][ T4025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.320431][ T4364] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.344623][ T4025] hub 1-1:1.0: bad descriptor, ignoring hub [ 57.346124][ T4025] hub: probe of 1-1:1.0 failed with error -5 [ 57.346156][ T4490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.348020][ T4025] cdc_wdm 1-1:1.0: skipping garbage [ 57.365480][ T4025] cdc_wdm 1-1:1.0: skipping garbage [ 57.368616][ T4490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.371265][ T4025] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 57.372849][ T4025] cdc_wdm 1-1:1.0: Unknown control protocol [ 57.553352][ T4506] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 57.555566][ T4506] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 57.557544][ T4506] netlink: 'syz.2.184': attribute type 5 has an invalid length. [ 57.559504][ T4506] netlink: 'syz.2.184': attribute type 6 has an invalid length. [ 57.576240][ T4506] netlink: 'syz.2.184': attribute type 7 has an invalid length. [ 57.578114][ T4506] netlink: 'syz.2.184': attribute type 9 has an invalid length. [ 57.586195][ T4506] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 57.588225][ T4506] netlink: 'syz.2.184': attribute type 11 has an invalid length. [ 57.631536][ T4510] device veth1_macvtap left promiscuous mode [ 57.634518][ T4510] device macsec0 entered promiscuous mode [ 57.664640][ T4510] device veth1_macvtap entered promiscuous mode [ 57.668519][ T1528] usb 1-1: USB disconnect, device number 5 [ 57.670966][ T4510] device macsec0 left promiscuous mode [ 57.804546][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 57.963664][ T4516] loop2: detected capacity change from 0 to 512 [ 58.001816][ T4516] EXT4-fs (loop2): Ignoring removed oldalloc option [ 58.014029][ T4516] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.188: Parent and EA inode have the same ino 15 [ 58.020952][ T4516] EXT4-fs (loop2): Remounting filesystem read-only [ 58.025142][ T4516] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.188: couldn't truncate inode 15 (err -30) [ 58.038855][ T4516] EXT4-fs (loop2): 1 orphan inode deleted [ 58.040902][ T4518] loop3: detected capacity change from 0 to 8192 [ 58.040986][ T4516] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 58.051461][ T4516] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.188: deleted inode referenced: 15 [ 58.056536][ T4516] EXT4-fs (loop2): Remounting filesystem read-only [ 58.059363][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 58.078156][ T4518] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.354698][ T4536] device team0 entered promiscuous mode [ 58.358575][ T4536] device team_slave_1 entered promiscuous mode [ 58.365238][ T4536] device team_slave_0 entered promiscuous mode [ 58.373913][ T4534] device team0 left promiscuous mode [ 58.377051][ T4534] device team_slave_1 left promiscuous mode [ 58.513420][ T4544] loop0: detected capacity change from 0 to 512 [ 58.595599][ T4544] EXT4-fs (loop0): Ignoring removed oldalloc option [ 58.612184][ T4544] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.201: Parent and EA inode have the same ino 15 [ 58.622998][ T4544] EXT4-fs (loop0): Remounting filesystem read-only [ 58.624701][ T4544] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.201: couldn't truncate inode 15 (err -30) [ 58.664484][ T4544] EXT4-fs (loop0): 1 orphan inode deleted [ 58.666032][ T4544] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 58.693355][ T4546] loop4: detected capacity change from 0 to 8192 [ 58.704679][ T4544] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.201: deleted inode referenced: 15 [ 58.710550][ T4544] EXT4-fs (loop0): Remounting filesystem read-only [ 58.753916][ T4546] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.802986][ T4561] device hsr0 entered promiscuous mode [ 58.819390][ T4561] device hsr_slave_0 left promiscuous mode [ 58.835272][ T4560] can: request_module (can-proto-0) failed. [ 58.872030][ T4561] device hsr_slave_1 left promiscuous mode [ 58.955103][ T4564] device vlan2 entered promiscuous mode [ 58.960423][ T4564] device syz_tun entered promiscuous mode [ 58.968467][ T4564] team0: Port device vlan2 added [ 59.219505][ T4578] device veth1_macvtap left promiscuous mode [ 59.224779][ T4578] device macsec0 entered promiscuous mode [ 59.283150][ T4587] loop1: detected capacity change from 0 to 512 [ 59.298729][ T4578] device veth1_macvtap entered promiscuous mode [ 59.302247][ T4578] device macsec0 left promiscuous mode [ 59.342618][ T4587] EXT4-fs (loop1): Ignoring removed oldalloc option [ 59.359378][ T4587] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.221: Parent and EA inode have the same ino 15 [ 59.362982][ T4587] EXT4-fs (loop1): Remounting filesystem read-only [ 59.364942][ T4587] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.221: couldn't truncate inode 15 (err -30) [ 59.378736][ T4587] EXT4-fs (loop1): 1 orphan inode deleted [ 59.387853][ T4587] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 59.399159][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 59.406459][ T4587] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.221: deleted inode referenced: 15 [ 59.410412][ T4587] EXT4-fs (loop1): Remounting filesystem read-only [ 59.428348][ T4598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 59.448220][ T4591] loop0: detected capacity change from 0 to 8192 [ 59.479956][ T4591] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.284350][ T4624] futex_wake_op: syz.4.235 tries to shift op by 32; fix this program [ 60.296448][ T4625] loop3: detected capacity change from 0 to 512 [ 60.405366][ T4625] EXT4-fs (loop3): Ignoring removed oldalloc option [ 60.442329][ T4625] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.236: Parent and EA inode have the same ino 15 [ 60.445789][ T4625] EXT4-fs (loop3): Remounting filesystem read-only [ 60.447473][ T4625] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.236: couldn't truncate inode 15 (err -30) [ 60.469016][ T4625] EXT4-fs (loop3): 1 orphan inode deleted [ 60.472335][ T4625] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 60.506747][ T4625] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.236: deleted inode referenced: 15 [ 60.549761][ T4628] loop4: detected capacity change from 0 to 8192 [ 60.554946][ T4625] EXT4-fs (loop3): Remounting filesystem read-only [ 60.625153][ T4628] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.730224][ T26] audit: type=1326 audit(60.700:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.3.242" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b7e228 code=0x0 [ 60.740254][ T4638] device veth1_macvtap left promiscuous mode [ 60.741806][ T4638] device macsec0 entered promiscuous mode [ 60.790478][ T4638] device veth1_macvtap entered promiscuous mode [ 60.792312][ T4638] device macsec0 left promiscuous mode [ 61.696551][ T4664] loop3: detected capacity change from 0 to 512 [ 61.741230][ T4664] EXT4-fs (loop3): Ignoring removed oldalloc option [ 61.773602][ T4665] loop2: detected capacity change from 0 to 8192 [ 61.777704][ T4664] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.252: Parent and EA inode have the same ino 15 [ 61.783180][ T4664] EXT4-fs (loop3): Remounting filesystem read-only [ 61.789776][ T4664] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.252: couldn't truncate inode 15 (err -30) [ 61.793816][ T4664] EXT4-fs (loop3): 1 orphan inode deleted [ 61.797548][ T4664] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 61.805308][ T4665] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.814839][ T4664] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.252: deleted inode referenced: 15 [ 61.818146][ T4664] EXT4-fs (loop3): Remounting filesystem read-only [ 61.821241][ T4664] __nla_validate_parse: 5 callbacks suppressed [ 61.821253][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 61.894771][ T4675] loop1: detected capacity change from 0 to 512 [ 61.967881][ T4675] EXT4-fs (loop1): 1 orphan inode deleted [ 61.969480][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,stripe=0x0000000000000008,resuid=0x0000000000000000,errors=remount-ro,nodiscard,user_xattr,min_batch_time=0x0000000000000a9f,bsddf,. Quota mode: none. [ 62.281471][ T4704] loop2: detected capacity change from 0 to 512 [ 62.314427][ T4698] loop1: detected capacity change from 0 to 8192 [ 62.328328][ T4704] EXT4-fs (loop2): Ignoring removed oldalloc option [ 62.355379][ T4698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.359059][ T4704] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.270: Parent and EA inode have the same ino 15 [ 62.367920][ T4704] EXT4-fs (loop2): Remounting filesystem read-only [ 62.369661][ T4704] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.270: couldn't truncate inode 15 (err -30) [ 62.400169][ T4704] EXT4-fs (loop2): 1 orphan inode deleted [ 62.401684][ T4704] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 62.432619][ T4704] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.270: deleted inode referenced: 15 [ 62.450213][ T4704] EXT4-fs (loop2): Remounting filesystem read-only [ 62.572473][ T4710] cgroup: fork rejected by pids controller in /syz4 [ 62.572840][ T4716] udc-core: couldn't find an available UDC or it's busy [ 62.576210][ T4716] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.619622][ T4721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 62.649943][ T4721] device vlan2 entered promiscuous mode [ 62.656176][ T4721] device bond0 entered promiscuous mode [ 62.659433][ T4721] device bond_slave_0 entered promiscuous mode [ 62.676326][ T4721] device bond_slave_1 entered promiscuous mode [ 62.681628][ T4721] device netdevsim0 entered promiscuous mode [ 62.702116][ T4721] device bond0 left promiscuous mode [ 62.703453][ T4721] device bond_slave_0 left promiscuous mode [ 62.706405][ T4721] device bond_slave_1 left promiscuous mode [ 62.713297][ T4721] device netdevsim0 left promiscuous mode [ 62.863818][ T4716] udc-core: couldn't find an available UDC or it's busy [ 62.940240][ T4716] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.998532][ T4733] loop0: detected capacity change from 0 to 8192 [ 63.128679][ T4733] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.446220][ T3978] device syz_tun left promiscuous mode [ 63.492442][ T3978] team0: Port device vlan2 removed [ 63.494092][ T4741] loop0: detected capacity change from 0 to 512 [ 63.556242][ T4743] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 63.566369][ T4741] EXT4-fs (loop0): Ignoring removed oldalloc option [ 63.591509][ T4741] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.286: Parent and EA inode have the same ino 15 [ 63.595717][ T4741] EXT4-fs (loop0): Remounting filesystem read-only [ 63.597451][ T4741] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.286: couldn't truncate inode 15 (err -30) [ 63.651167][ T4741] EXT4-fs (loop0): 1 orphan inode deleted [ 63.653007][ T4741] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 63.734419][ T4741] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.286: deleted inode referenced: 15 [ 63.760260][ T4741] EXT4-fs (loop0): Remounting filesystem read-only [ 64.075097][ T4241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.187045][ T4241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.257423][ T4241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.294727][ T4761] loop0: detected capacity change from 0 to 8192 [ 64.311459][ T4241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.342329][ T4761] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.462227][ T4753] chnl_net:caif_netlink_parms(): no params data found [ 64.532789][ T4748] loop3: detected capacity change from 0 to 40427 [ 64.590151][ T4748] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.592512][ T4748] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.603197][ T4748] F2FS-fs (loop3): invalid crc value [ 64.667341][ T4748] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.699323][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.716596][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.719192][ T4753] device bridge_slave_0 entered promiscuous mode [ 64.750894][ T4748] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.752707][ T4748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.855226][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.857084][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.861028][ T4753] device bridge_slave_1 entered promiscuous mode [ 64.934110][ T4785] udc-core: couldn't find an available UDC or it's busy [ 64.936014][ T4785] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.704919][ T4753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.709451][ T4753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.745689][ T4753] team0: Port device team_slave_0 added [ 65.749276][ T4753] team0: Port device team_slave_1 added [ 65.897671][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.899468][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.941538][ T4753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.008697][ T4753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.010790][ T4753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.026787][ T4753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.090289][ T4020] Bluetooth: hci4: command 0x0409 tx timeout [ 66.202250][ T4753] device hsr_slave_0 entered promiscuous mode [ 66.230737][ T4753] device hsr_slave_1 entered promiscuous mode [ 66.281285][ T4753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.283315][ T4753] Cannot create hsr debugfs directory [ 66.338155][ T4812] loop2: detected capacity change from 0 to 512 [ 66.380233][ T4812] EXT4-fs (loop2): Ignoring removed oldalloc option [ 66.401872][ T4812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.303: Parent and EA inode have the same ino 15 [ 66.418104][ T4812] EXT4-fs (loop2): Remounting filesystem read-only [ 66.419897][ T4812] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.303: couldn't truncate inode 15 (err -30) [ 66.431636][ T4021] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 66.467966][ T4812] EXT4-fs (loop2): 1 orphan inode deleted [ 66.469592][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 66.537503][ T4812] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.303: deleted inode referenced: 15 [ 66.540798][ T4812] EXT4-fs (loop2): Remounting filesystem read-only [ 66.670181][ T4021] usb 1-1: Using ep0 maxpacket: 16 [ 66.717876][ T4818] loop1: detected capacity change from 0 to 8192 [ 66.781570][ T4818] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.790472][ T4021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 66.793502][ T4021] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 66.795805][ T4021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.816591][ T4021] usb 1-1: config 0 descriptor?? [ 66.825645][ T4829] capability: warning: `syz.2.307' uses deprecated v2 capabilities in a way that may be insecure [ 67.754981][ T4809] udc-core: couldn't find an available UDC or it's busy [ 67.756898][ T4809] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.810705][ T4021] hid (null): invalid report_size 12141 [ 67.812305][ T4021] hid (null): unknown global tag 0xd [ 67.813636][ T4021] hid (null): unknown global tag 0xd [ 67.815352][ T4021] hid (null): unknown global tag 0x83 [ 67.816948][ T4021] hid (null): unknown global tag 0xc [ 67.818224][ T4021] hid (null): global environment stack underflow [ 67.868683][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.874408][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.876247][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.926387][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.928316][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.946848][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.948651][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.960214][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.966525][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.968452][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.978968][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x4 [ 67.987216][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.989033][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.992747][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.994589][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 67.996521][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.014797][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.016648][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.039928][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.050117][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.052025][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.057690][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.059552][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.070179][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.072044][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.073897][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.085527][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.087631][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.089426][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.094853][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.096649][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.098674][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.109299][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.132537][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.134375][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.136159][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.137934][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.159055][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.171678][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.173520][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.175312][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.190150][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.194602][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.196411][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.208619][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.212512][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.214388][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.216224][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.218040][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.230318][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.232685][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.234748][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.236627][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.238538][ T4021] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 68.247541][ T4021] hid-generic 0003:0158:0100.0002: invalid report_size 12141 [ 68.249469][ T4021] hid-generic 0003:0158:0100.0002: item 0 2 1 7 parsing failed [ 68.253717][ T4021] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 68.274806][ T4021] usb 1-1: USB disconnect, device number 6 [ 68.300810][ T4025] Bluetooth: hci4: command 0x041b tx timeout [ 68.457900][ T4241] device hsr_slave_0 left promiscuous mode [ 68.485633][ T4241] device hsr_slave_1 left promiscuous mode [ 68.550894][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.553104][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.562330][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.567120][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.588736][ T4241] device bridge_slave_1 left promiscuous mode [ 68.598362][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.642788][ T4241] device bridge_slave_0 left promiscuous mode [ 68.644792][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.786424][ T4241] device veth1_macvtap left promiscuous mode [ 68.788460][ T4241] device veth0_macvtap left promiscuous mode [ 68.790869][ T4241] device veth1_vlan left promiscuous mode [ 68.792589][ T4241] device veth0_vlan left promiscuous mode [ 69.206232][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 69.228543][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.278239][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.478632][ T4241] bond0 (unregistering): Released all slaves [ 69.612217][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.614004][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.614155][ T1952] cfg80211: failed to load regulatory.db [ 69.699055][ T4881] loop1: detected capacity change from 0 to 512 [ 69.761448][ T4881] EXT4-fs (loop1): Ignoring removed oldalloc option [ 69.827767][ T4879] loop2: detected capacity change from 0 to 8192 [ 69.832920][ T4881] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.317: Parent and EA inode have the same ino 15 [ 69.833610][ T4753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.842058][ T4881] EXT4-fs (loop1): Remounting filesystem read-only [ 69.843715][ T4881] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.317: couldn't truncate inode 15 (err -30) [ 69.852242][ T4881] EXT4-fs (loop1): 1 orphan inode deleted [ 69.853719][ T4881] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 69.871948][ T4881] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.317: deleted inode referenced: 15 [ 69.881903][ T4881] EXT4-fs (loop1): Remounting filesystem read-only [ 69.882834][ T4753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.884427][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 69.932268][ T4753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.941345][ T4879] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.956772][ T4879] 9pnet: Insufficient options for proto=fd [ 69.959135][ T4879] 9pnet: Insufficient options for proto=fd [ 70.024025][ T4753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.612876][ T1952] Bluetooth: hci4: command 0x040f tx timeout [ 71.096664][ T4753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.145292][ T4917] udc-core: couldn't find an available UDC or it's busy [ 71.147119][ T4917] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.161963][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.164301][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.172278][ T4753] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.207866][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.210835][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.213250][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.214955][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.217615][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.298862][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.301762][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.304166][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.306048][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.308460][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.342100][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.344857][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.347906][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.398816][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.422653][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.425483][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.427866][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.461324][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.466698][ T4753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.469959][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.475657][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.478212][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.703107][ T4933] loop0: detected capacity change from 0 to 8192 [ 71.795746][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.797750][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.817391][ T4933] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.827010][ T4933] 9pnet: Insufficient options for proto=fd [ 71.829034][ T4753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.829307][ T4933] 9pnet: Insufficient options for proto=fd [ 72.150151][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.157446][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.194189][ T4967] loop2: detected capacity change from 0 to 512 [ 72.198158][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.201460][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.204225][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.208825][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.218779][ T4753] device veth0_vlan entered promiscuous mode [ 72.241486][ T4753] device veth1_vlan entered promiscuous mode [ 72.279049][ T4967] EXT4-fs (loop2): Ignoring removed oldalloc option [ 72.280279][ T1952] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.294243][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.296729][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.299698][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.304461][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.306221][ T4967] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.333: Parent and EA inode have the same ino 15 [ 72.312331][ T4753] device veth0_macvtap entered promiscuous mode [ 72.319511][ T4753] device veth1_macvtap entered promiscuous mode [ 72.331442][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.334187][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.336787][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.339427][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.340638][ T4967] EXT4-fs (loop2): Remounting filesystem read-only [ 72.349672][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.352807][ T4967] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.333: couldn't truncate inode 15 (err -30) [ 72.353470][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.360442][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.361036][ T4967] EXT4-fs (loop2): 1 orphan inode deleted [ 72.364211][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.371028][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.374698][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 72.377572][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.384819][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387491][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.391563][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.398427][ T4753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.402625][ T4753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.406607][ T4753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.409680][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.412603][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.435997][ T4967] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.333: deleted inode referenced: 15 [ 72.462106][ T4967] EXT4-fs (loop2): Remounting filesystem read-only [ 72.469132][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.471904][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.474492][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.477351][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.491563][ T4753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.493729][ T4753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.499381][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 72.510158][ T4753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.512314][ T4753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.520560][ T1952] usb 1-1: Using ep0 maxpacket: 8 [ 72.640452][ T1952] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 72.642651][ T1952] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.645099][ T1952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.647553][ T1952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.671045][ T1952] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.674922][ T1952] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.677486][ T1952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.691509][ T4007] Bluetooth: hci4: command 0x0419 tx timeout [ 72.711669][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.713819][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.717717][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.805554][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.807837][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.838599][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.950153][ T1952] usb 1-1: usb_control_msg returned -32 [ 72.951617][ T1952] usbtmc 1-1:16.0: can't read capabilities [ 73.791452][ T4996] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 73.828882][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.839540][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.845098][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.855168][ T4998] device bridge_slave_0 left promiscuous mode [ 73.860760][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.916539][ T4998] device bridge_slave_1 left promiscuous mode [ 73.918424][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.973244][ T4998] bond0: (slave bond_slave_0): Releasing backup interface [ 73.992820][ T4023] usb 1-1: USB disconnect, device number 7 [ 74.024450][ T4998] bond0: (slave bond_slave_1): Releasing backup interface [ 74.138560][ T4998] team0: Port device team_slave_0 removed [ 74.173681][ T4998] team0: Port device team_slave_1 removed [ 74.181633][ T4998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.190763][ T4998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.254181][ T4999] bridge0: port 1(veth0) entered blocking state [ 74.255884][ T4999] bridge0: port 1(veth0) entered disabled state [ 74.259089][ T4999] device veth0 entered promiscuous mode [ 74.280712][ T4999] bridge0: port 1(veth0) entered blocking state [ 74.282468][ T4999] bridge0: port 1(veth0) entered forwarding state [ 74.496652][ T5012] loop1: detected capacity change from 0 to 8192 [ 74.559061][ T5012] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.572932][ T5012] 9pnet: Insufficient options for proto=fd [ 74.578901][ T5012] 9pnet: Insufficient options for proto=fd [ 74.641561][ T5022] loop0: detected capacity change from 0 to 512 [ 74.691281][ T5022] EXT4-fs (loop0): Ignoring removed oldalloc option [ 74.715697][ T5022] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.347: Parent and EA inode have the same ino 15 [ 74.719602][ T5022] EXT4-fs (loop0): Remounting filesystem read-only [ 74.729532][ T5022] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.347: couldn't truncate inode 15 (err -30) [ 74.743692][ T5022] EXT4-fs (loop0): 1 orphan inode deleted [ 74.745349][ T5022] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 74.754307][ T5022] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.347: deleted inode referenced: 15 [ 74.757746][ T5022] EXT4-fs (loop0): Remounting filesystem read-only [ 74.762280][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 75.578340][ T4007] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 75.697998][ T4007] Bluetooth: hci0: Injecting HCI hardware error event [ 75.709530][ T3979] Bluetooth: hci0: hardware error 0x00 [ 75.855715][ T5045] udc-core: couldn't find an available UDC or it's busy [ 75.857511][ T5045] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.861953][ T26] audit: type=1326 audit(75.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.3.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b7e228 code=0x7fc00000 [ 76.189043][ T5050] loop3: detected capacity change from 0 to 8192 [ 76.244766][ T5050] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.281014][ T5053] infiniband syz0: set down [ 76.283643][ T5053] infiniband syz0: added ipvlan1 [ 76.288932][ T5062] loop1: detected capacity change from 0 to 512 [ 76.328314][ T5053] RDS/IB: syz0: added [ 76.329941][ T5053] smc: adding ib device syz0 with port count 1 [ 76.333237][ T5062] EXT4-fs (loop1): Ignoring removed oldalloc option [ 76.349940][ T5062] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.363: Parent and EA inode have the same ino 15 [ 76.360377][ T5053] smc: ib device syz0 port 1 has pnetid [ 76.365894][ T5062] EXT4-fs (loop1): Remounting filesystem read-only [ 76.368810][ T5062] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.363: couldn't truncate inode 15 (err -30) [ 76.400052][ T5062] EXT4-fs (loop1): 1 orphan inode deleted [ 76.401661][ T5062] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 76.414375][ T5062] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.363: deleted inode referenced: 15 [ 76.422957][ T5062] EXT4-fs (loop1): Remounting filesystem read-only [ 76.426135][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 76.561350][ T5073] cgroup: fork rejected by pids controller in /syz3 [ 76.843437][ T5084] loop1: detected capacity change from 0 to 256 [ 77.078338][ T5091] udc-core: couldn't find an available UDC or it's busy [ 77.080446][ T5091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.161886][ T5089] loop0: detected capacity change from 0 to 8192 [ 77.224789][ T5089] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.410378][ T5100] udc-core: couldn't find an available UDC or it's busy [ 77.412198][ T5100] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.432503][ T5097] loop0: detected capacity change from 0 to 512 [ 77.465771][ T5097] EXT4-fs (loop0): Ignoring removed oldalloc option [ 77.477705][ T5097] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.377: Parent and EA inode have the same ino 15 [ 77.485006][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 77.490218][ T5097] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.377: couldn't truncate inode 15 (err -30) [ 77.517980][ T5097] EXT4-fs (loop0): 1 orphan inode deleted [ 77.519559][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 77.533161][ T5097] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.377: deleted inode referenced: 15 [ 77.557035][ T5097] EXT4-fs (loop0): Remounting filesystem read-only [ 77.558632][ T5106] udc-core: couldn't find an available UDC or it's busy [ 77.558652][ T5106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.573949][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 77.581039][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 77.763867][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.768362][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.779463][ T5093] device bridge_slave_0 entered promiscuous mode [ 77.797956][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.799808][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.803374][ T5093] device bridge_slave_1 entered promiscuous mode [ 77.907462][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.917552][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.999952][ T5093] team0: Port device team_slave_0 added [ 78.009372][ T5093] team0: Port device team_slave_1 added [ 78.052013][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.053803][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.078650][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.083799][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.085544][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.139145][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.213871][ T5125] loop4: detected capacity change from 0 to 8192 [ 78.258299][ T5137] udc-core: couldn't find an available UDC or it's busy [ 78.266421][ T5137] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.068883][ T5125] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.075885][ T5093] device hsr_slave_0 entered promiscuous mode [ 79.127638][ T5142] loop1: detected capacity change from 0 to 512 [ 79.131090][ T5093] device hsr_slave_1 entered promiscuous mode [ 79.160526][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.165018][ T5093] Cannot create hsr debugfs directory [ 79.170601][ T5142] EXT4-fs (loop1): Ignoring removed oldalloc option [ 79.201615][ T5142] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.393: Parent and EA inode have the same ino 15 [ 79.224497][ T5142] EXT4-fs (loop1): Remounting filesystem read-only [ 79.229613][ T5142] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.393: couldn't truncate inode 15 (err -30) [ 79.245900][ T5142] EXT4-fs (loop1): 1 orphan inode deleted [ 79.250411][ T5142] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 79.278777][ T5142] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.393: deleted inode referenced: 15 [ 79.298329][ T5142] EXT4-fs (loop1): Remounting filesystem read-only [ 79.319674][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 79.336750][ T5093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.370360][ T4007] Bluetooth: hci3: command 0x0409 tx timeout [ 79.455731][ T5093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.548870][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 79.559033][ T5093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.646047][ T26] audit: type=1400 audit(79.620:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A027E142D901405 pid=5156 comm="syz.1.400" [ 79.654621][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 79.909114][ T5093] team0: Port device netdevsim0 removed [ 80.184985][ T5093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.530614][ T5168] udc-core: couldn't find an available UDC or it's busy [ 80.532748][ T5168] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.727681][ T5177] loop4: detected capacity change from 0 to 512 [ 80.730717][ T5175] loop2: detected capacity change from 0 to 8192 [ 80.749177][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.772937][ T5177] EXT4-fs (loop4): Ignoring removed oldalloc option [ 80.779650][ T5177] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.407: Parent and EA inode have the same ino 15 [ 80.790534][ T5177] EXT4-fs (loop4): Remounting filesystem read-only [ 80.792139][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.792596][ T5177] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.407: couldn't truncate inode 15 (err -30) [ 80.802590][ T5177] EXT4-fs (loop4): 1 orphan inode deleted [ 80.804283][ T5177] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 80.805946][ T5175] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.822461][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.826563][ T5177] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.407: deleted inode referenced: 15 [ 80.831337][ T5177] EXT4-fs (loop4): Remounting filesystem read-only [ 80.847192][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 80.878635][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.088504][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.155446][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.157991][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.168639][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.191759][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.194449][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.196937][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.198849][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.211853][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.218181][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.221932][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.241694][ T4007] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.243641][ T4007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.256102][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.287992][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.291460][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.294811][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.298039][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.305984][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.308788][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.325631][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.329387][ T5202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.331571][ T5202] IPv6: NLM_F_CREATE should be set when creating new route [ 81.333410][ T5202] IPv6: NLM_F_CREATE should be set when creating new route [ 81.339813][ T5093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.344742][ T5204] binder: 5203:5204 tried to acquire reference to desc 0, got 1 instead [ 81.347883][ T5204] binder: 5203:5204 got transaction with invalid data ptr [ 81.349940][ T5204] binder: 5203:5204 transaction failed 29201/-14, size 0-24 line 3187 [ 81.350679][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.358107][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.361428][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.364035][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.400210][ T5204] binder: 5203:5204 tried to acquire reference to desc 0, got 1 instead [ 81.420379][ T25] binder: send failed reply for transaction 8 to 5203:5204 [ 81.422754][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.424592][ T25] binder: undelivered TRANSACTION_COMPLETE [ 81.426148][ T25] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.450228][ T4052] Bluetooth: hci3: command 0x041b tx timeout [ 81.557323][ T5215] loop1: detected capacity change from 0 to 512 [ 81.651837][ T5212] loop4: detected capacity change from 0 to 8192 [ 81.671695][ T5215] EXT4-fs (loop1): Ignoring removed oldalloc option [ 81.723679][ T5215] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.420: Parent and EA inode have the same ino 15 [ 81.741183][ T5215] EXT4-fs (loop1): Remounting filesystem read-only [ 81.742005][ T5212] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.742932][ T5215] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.420: couldn't truncate inode 15 (err -30) [ 81.752520][ T5215] EXT4-fs (loop1): 1 orphan inode deleted [ 81.754164][ T5215] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 81.765573][ T5215] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.420: deleted inode referenced: 15 [ 81.771003][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.775598][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.360031][ T5215] EXT4-fs (loop1): Remounting filesystem read-only [ 82.571269][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.590382][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 82.602577][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.605242][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.656058][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.658966][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.666523][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.669328][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.678267][ T5093] device veth0_vlan entered promiscuous mode [ 82.693535][ T5093] device veth1_vlan entered promiscuous mode [ 82.701612][ T5230] udc-core: couldn't find an available UDC or it's busy [ 82.703382][ T5230] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.736031][ T5230] udc-core: couldn't find an available UDC or it's busy [ 82.737862][ T5230] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.751297][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.753733][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.756181][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.758721][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.771019][ T5093] device veth0_macvtap entered promiscuous mode [ 82.778121][ T5093] device veth1_macvtap entered promiscuous mode [ 82.792268][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.794971][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.797236][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.810119][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.813386][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.815978][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.818377][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.839523][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.844237][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.846604][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.849296][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.853308][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.855823][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.868531][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.882599][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.885158][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.887751][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.900055][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.902787][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.905215][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.907777][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.940120][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.942459][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.945141][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.951116][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.953313][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.955529][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.957683][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.044852][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.047629][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.057659][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.087972][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.091524][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.096028][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.531566][ T4007] Bluetooth: hci3: command 0x040f tx timeout [ 83.741663][ T5255] loop2: detected capacity change from 0 to 8 [ 84.055300][ T5259] loop2: detected capacity change from 0 to 1024 [ 84.249104][ T5259] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.431: Invalid block bitmap block 0 in block_group 0 [ 84.290906][ T5259] Quota error (device loop2): write_blk: dquota write failed [ 84.293033][ T5259] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 84.296045][ T5259] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.431: Failed to acquire dquot type 0 [ 84.320663][ T5259] EXT4-fs error (device loop2): ext4_free_blocks:6226: comm syz.2.431: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.358707][ T5266] loop4: detected capacity change from 0 to 512 [ 84.359062][ T5259] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.431: Invalid inode bitmap blk 0 in block_group 0 [ 84.381309][ T4240] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 84.383816][ T4240] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:7: Failed to release dquot type 0 [ 84.387021][ T5259] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 84.400117][ T5259] EXT4-fs (loop2): 1 orphan inode deleted [ 84.401575][ T5259] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 84.410227][ T5266] EXT4-fs (loop4): Ignoring removed oldalloc option [ 84.448216][ T5259] udc-core: couldn't find an available UDC or it's busy [ 84.450145][ T5259] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.455025][ T5266] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.434: Parent and EA inode have the same ino 15 [ 84.458568][ T5266] EXT4-fs (loop4): Remounting filesystem read-only [ 84.468864][ T5259] udc-core: couldn't find an available UDC or it's busy [ 84.472098][ T5266] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.434: couldn't truncate inode 15 (err -30) [ 84.487562][ T5259] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.491628][ T5266] EXT4-fs (loop4): 1 orphan inode deleted [ 84.493071][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 84.505937][ T5266] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.434: deleted inode referenced: 15 [ 84.533569][ T5266] EXT4-fs (loop4): Remounting filesystem read-only [ 84.535996][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 84.647699][ T5265] loop3: detected capacity change from 0 to 8192 [ 84.718712][ T5265] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.937816][ T5282] udc-core: couldn't find an available UDC or it's busy [ 84.939673][ T5282] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.416525][ T5299] input: syz1 as /devices/virtual/input/input3 [ 85.621050][ T5305] loop1: detected capacity change from 0 to 512 [ 86.411510][ T5305] EXT4-fs (loop1): Ignoring removed oldalloc option [ 86.439000][ T5305] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.447: Parent and EA inode have the same ino 15 [ 86.443663][ T5305] EXT4-fs (loop1): Remounting filesystem read-only [ 86.449932][ T5305] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.447: couldn't truncate inode 15 (err -30) [ 86.482387][ T5305] EXT4-fs (loop1): 1 orphan inode deleted [ 86.483953][ T5305] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 86.507058][ T4240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.533901][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 86.597838][ T4240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.648753][ T5315] udc-core: couldn't find an available UDC or it's busy [ 86.658106][ T5315] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.683007][ T4240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.774963][ T4240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.921229][ T5288] chnl_net:caif_netlink_parms(): no params data found [ 86.934932][ T5318] loop1: detected capacity change from 0 to 8192 [ 86.959951][ T5318] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.117143][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.129803][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.147857][ T5288] device bridge_slave_0 entered promiscuous mode [ 87.162067][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.174139][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.186535][ T5288] device bridge_slave_1 entered promiscuous mode [ 87.199874][ T4023] Bluetooth: hci5: command 0x0409 tx timeout [ 88.153359][ T5288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.831135][ T5288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.112505][ T5288] team0: Port device team_slave_0 added [ 89.123215][ T5288] team0: Port device team_slave_1 added [ 89.840933][ T5358] loop3: detected capacity change from 0 to 512 [ 89.844523][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.846275][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.873720][ T5288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.900388][ T5358] EXT4-fs (loop3): Ignoring removed oldalloc option [ 89.912197][ T5288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.913907][ T5288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.945181][ T25] Bluetooth: hci5: command 0x041b tx timeout [ 89.947649][ T5288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.964314][ T5358] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.461: Parent and EA inode have the same ino 15 [ 89.967954][ T5358] EXT4-fs (loop3): Remounting filesystem read-only [ 89.969742][ T5358] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.461: couldn't truncate inode 15 (err -30) [ 90.042074][ T5358] EXT4-fs (loop3): 1 orphan inode deleted [ 90.043701][ T5358] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 90.076096][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 90.844650][ T5364] loop1: detected capacity change from 0 to 8192 [ 90.989874][ T5364] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.042165][ T5288] device hsr_slave_0 entered promiscuous mode [ 91.045774][ T5376] ptrace attach of "./syz-executor exec"[3969] was attempted by "./syz-executor exec"[5376] [ 91.090912][ T5288] device hsr_slave_1 entered promiscuous mode [ 91.229204][ T5288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.237610][ T5288] Cannot create hsr debugfs directory [ 92.010122][ T25] Bluetooth: hci5: command 0x040f tx timeout [ 92.353248][ T5404] loop0: detected capacity change from 0 to 512 [ 92.398505][ T5404] EXT4-fs (loop0): Ignoring removed oldalloc option [ 92.423502][ T5404] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.474: Parent and EA inode have the same ino 15 [ 92.428130][ T5404] EXT4-fs (loop0): Remounting filesystem read-only [ 92.429915][ T5404] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.474: couldn't truncate inode 15 (err -30) [ 92.440774][ T5404] EXT4-fs (loop0): 1 orphan inode deleted [ 92.446748][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 92.546027][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 93.020614][ T5288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.050464][ T5421] loop0: detected capacity change from 0 to 8192 [ 93.062421][ T5288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.084155][ T5421] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.122034][ T5288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.800732][ T5288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.090114][ T25] Bluetooth: hci5: command 0x0419 tx timeout [ 94.140766][ T4240] device hsr_slave_0 left promiscuous mode [ 94.195840][ T4240] device hsr_slave_1 left promiscuous mode [ 94.256594][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 94.261181][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.263099][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.286620][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.288514][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.308426][ T4240] device bridge_slave_1 left promiscuous mode [ 94.314885][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.325471][ T5451] loop2: detected capacity change from 0 to 1024 [ 94.367429][ T4240] device bridge_slave_0 left promiscuous mode [ 94.369123][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.395517][ T5451] hfsplus: invalid attributes max_key_len 768 [ 94.398138][ T5451] hfsplus: failed to load attributes file [ 94.501378][ T4240] device veth1_macvtap left promiscuous mode [ 94.503121][ T4240] device veth0_macvtap left promiscuous mode [ 94.504739][ T4240] device veth1_vlan left promiscuous mode [ 94.505908][ T4240] device veth0_vlan left promiscuous mode [ 94.889822][ T5373] smc: removing ib device syz0 [ 95.012539][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 95.015737][ T5455] loop3: detected capacity change from 0 to 8192 [ 95.039465][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 95.084253][ T5455] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.097230][ T5455] 9pnet: Insufficient options for proto=fd [ 95.114620][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.222564][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.449651][ T4240] bond0 (unregistering): Released all slaves [ 95.632024][ T26] audit: type=1400 audit(95.610:5): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=263A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=5459 comm="syz.1.489" [ 95.757021][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.776469][ T5468] udc-core: couldn't find an available UDC or it's busy [ 95.784693][ T5468] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.791505][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.809580][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.867785][ T5288] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.895318][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.897916][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.923159][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.925980][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.928413][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.930377][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.933317][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.038613][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.298899][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.490874][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.493243][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.564270][ T5485] udc-core: couldn't find an available UDC or it's busy [ 97.566118][ T5485] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.600891][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.629181][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.654877][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.658321][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.671857][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.751017][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.751765][ T5498] udc-core: couldn't find an available UDC or it's busy [ 97.753777][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.754703][ T5498] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.757255][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.768503][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.773037][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.775563][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.781981][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.843958][ T5502] udc-core: couldn't find an available UDC or it's busy [ 97.845843][ T5502] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.888843][ T5493] loop0: detected capacity change from 0 to 8192 [ 97.962281][ T5493] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.981956][ T5493] 9pnet: Insufficient options for proto=fd [ 98.055934][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.057959][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.077711][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.148066][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 98.208458][ T5515] loop0: detected capacity change from 0 to 1024 [ 98.303307][ T5515] hfsplus: invalid attributes max_key_len 768 [ 98.305171][ T5515] hfsplus: failed to load attributes file [ 98.506509][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.509049][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.663231][ T5288] device veth0_vlan entered promiscuous mode [ 98.666268][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.668669][ T1952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.689628][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.806140][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.332135][ T5288] device veth1_vlan entered promiscuous mode [ 99.610764][ T5552] mmap: syz.3.512 (5552) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 99.627625][ T5288] device veth0_macvtap entered promiscuous mode [ 99.642221][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.644920][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.647601][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.049299][ T5288] device veth1_macvtap entered promiscuous mode [ 100.294602][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.360066][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.380035][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.382414][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.432551][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.435127][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.437760][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.440533][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.443258][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.447186][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.453925][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.456600][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.473279][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.480473][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.490902][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.494104][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.504994][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.507565][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.509855][ T5288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.529125][ T5288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.546137][ T5549] loop0: detected capacity change from 0 to 8192 [ 100.550802][ T5288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.553591][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.556259][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.563046][ T5288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.565264][ T5288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.567355][ T5288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.569660][ T5288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.691369][ T5549] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.705273][ T5549] 9pnet: Insufficient options for proto=fd [ 100.718568][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 100.721668][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.723986][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.728362][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.803673][ T5574] loop1: detected capacity change from 0 to 1024 [ 100.815005][ T335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.817145][ T335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.823381][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.905331][ T5574] hfsplus: invalid attributes max_key_len 768 [ 100.907258][ T5574] hfsplus: failed to load attributes file [ 101.355710][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 102.389956][ T5615] loop3: detected capacity change from 0 to 512 [ 102.513976][ T5615] EXT4-fs (loop3): Ignoring removed oldalloc option [ 102.593657][ T5615] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.526: Parent and EA inode have the same ino 15 [ 102.597352][ T5615] EXT4-fs (loop3): Remounting filesystem read-only [ 102.599264][ T5615] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.526: couldn't truncate inode 15 (err -30) [ 102.628720][ T5615] EXT4-fs (loop3): 1 orphan inode deleted [ 102.657760][ T5616] loop1: detected capacity change from 0 to 8192 [ 102.662764][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 102.707876][ T5615] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.526: deleted inode referenced: 15 [ 102.718173][ T5629] loop0: detected capacity change from 0 to 512 [ 102.734661][ T5616] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.739612][ T5615] EXT4-fs (loop3): Remounting filesystem read-only [ 102.751220][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 102.754437][ T5616] 9pnet: Insufficient options for proto=fd [ 102.761299][ T5629] EXT4-fs (loop0): Ignoring removed oldalloc option [ 102.791226][ T5629] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.530: Parent and EA inode have the same ino 15 [ 102.805008][ T5629] EXT4-fs (loop0): Remounting filesystem read-only [ 102.806697][ T5629] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.530: couldn't truncate inode 15 (err -30) [ 102.902514][ T5629] EXT4-fs (loop0): 1 orphan inode deleted [ 102.904098][ T5629] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 102.959834][ T5629] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.530: deleted inode referenced: 15 [ 102.969827][ T5629] EXT4-fs (loop0): Remounting filesystem read-only [ 103.041258][ T5640] loop1: detected capacity change from 0 to 2048 [ 103.172553][ T5645] loop4: detected capacity change from 0 to 512 [ 103.196237][ T5640] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.535: casefold flag without casefold feature [ 103.200717][ T5640] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 103.219937][ T5640] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 103.223430][ T5640] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.521442][ T5645] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.523420][ T5645] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 103.525962][ T5668] udc-core: couldn't find an available UDC or it's busy [ 103.534892][ T5668] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.549124][ T5645] EXT4-fs (loop4): 1 truncate cleaned up [ 103.551482][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 103.704544][ T5663] loop0: detected capacity change from 0 to 8192 [ 103.725057][ T5663] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.739233][ T5663] 9pnet: Insufficient options for proto=fd [ 103.757394][ T5675] loop4: detected capacity change from 0 to 512 [ 103.805629][ T5677] loop3: detected capacity change from 0 to 1024 [ 103.813985][ T5675] EXT4-fs (loop4): Ignoring removed oldalloc option [ 103.857629][ T5675] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.547: Parent and EA inode have the same ino 15 [ 103.868965][ T5675] EXT4-fs (loop4): Remounting filesystem read-only [ 103.887381][ T5675] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.547: couldn't truncate inode 15 (err -30) [ 103.911712][ T5675] EXT4-fs (loop4): 1 orphan inode deleted [ 103.913275][ T5675] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 103.960922][ T5675] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.547: deleted inode referenced: 15 [ 104.020139][ T5675] EXT4-fs (loop4): Remounting filesystem read-only [ 104.111997][ T5687] loop0: detected capacity change from 0 to 1024 [ 104.119297][ T5689] udc-core: couldn't find an available UDC or it's busy [ 104.148549][ T5689] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.377180][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 104.477281][ T5701] loop2: detected capacity change from 0 to 8192 [ 104.524786][ T5701] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.540340][ T5701] 9pnet: Insufficient options for proto=fd [ 104.707033][ T5718] loop3: detected capacity change from 0 to 128 [ 104.792658][ T5718] FAT-fs (loop3): Unrecognized mount option "nl80211" or missing value [ 104.804951][ T5719] loop4: detected capacity change from 0 to 512 [ 105.708135][ T5714] loop2: detected capacity change from 0 to 512 [ 105.734888][ T5723] binder: 5722:5723 BC_FREE_BUFFER u0000000000000000 no match [ 105.736939][ T5723] binder: 5722:5723 transaction failed 29189/-22, size 0-0 line 2919 [ 105.741681][ T4045] binder: undelivered TRANSACTION_ERROR: 29189 [ 105.789568][ T5714] EXT4-fs (loop2): Ignoring removed oldalloc option [ 105.792076][ T5719] EXT4-fs (loop4): Ignoring removed oldalloc option [ 105.806826][ T5719] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.567: Parent and EA inode have the same ino 15 [ 105.839565][ T5714] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.565: Parent and EA inode have the same ino 15 [ 105.847313][ T5714] EXT4-fs (loop2): Remounting filesystem read-only [ 105.859331][ T5719] EXT4-fs (loop4): Remounting filesystem read-only [ 105.861292][ T5719] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.567: couldn't truncate inode 15 (err -30) [ 105.869505][ T5714] EXT4-fs error (device loop2): ext4_evict_inode:293: comm syz.2.565: couldn't truncate inode 15 (err -30) [ 105.890824][ T5719] EXT4-fs (loop4): 1 orphan inode deleted [ 105.892675][ T5719] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 105.900112][ T5714] EXT4-fs (loop2): 1 orphan inode deleted [ 105.902287][ T5714] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 105.928696][ T5733] udc-core: couldn't find an available UDC or it's busy [ 105.929948][ T5719] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.567: deleted inode referenced: 15 [ 105.930600][ T5733] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.938335][ T5714] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.565: deleted inode referenced: 15 [ 105.945793][ T5732] syz.0.573 sent an empty control message without MSG_MORE. [ 105.953811][ T5714] EXT4-fs (loop2): Remounting filesystem read-only [ 105.960731][ T5719] EXT4-fs (loop4): Remounting filesystem read-only [ 105.982510][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 106.224749][ T5739] loop4: detected capacity change from 0 to 8192 [ 106.260500][ T5739] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.529366][ T5765] loop1: detected capacity change from 0 to 512 [ 107.575599][ T5770] udc-core: couldn't find an available UDC or it's busy [ 107.577374][ T5770] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 107.611727][ T26] audit: type=1326 audit(107.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.585" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3c32228 code=0x0 [ 107.655979][ T5765] EXT4-fs (loop1): Ignoring removed oldalloc option [ 107.718993][ T5765] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.584: Parent and EA inode have the same ino 15 [ 107.723980][ T5765] EXT4-fs (loop1): Remounting filesystem read-only [ 107.725897][ T5765] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.584: couldn't truncate inode 15 (err -30) [ 107.729560][ T5765] EXT4-fs (loop1): 1 orphan inode deleted [ 107.737932][ T5765] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 107.774437][ T5765] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.584: deleted inode referenced: 15 [ 107.788830][ T5765] EXT4-fs (loop1): Remounting filesystem read-only [ 108.046523][ T153] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.051221][ T153] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.883557][ T5788] loop1: detected capacity change from 0 to 8192 [ 108.906754][ T5788] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.164490][ T4052] Bluetooth: hci4: command 0x1003 tx timeout [ 110.166135][ T3985] Bluetooth: hci4: sending frame failed (-49) [ 110.314860][ T5820] udc-core: couldn't find an available UDC or it's busy [ 110.316761][ T5820] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.529808][ T5824] udc-core: couldn't find an available UDC or it's busy [ 110.533493][ T5824] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.635645][ T5826] loop1: detected capacity change from 0 to 512 [ 110.715444][ T5826] EXT4-fs (loop1): Ignoring removed oldalloc option [ 110.728614][ T5826] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.602: Parent and EA inode have the same ino 15 [ 110.733413][ T5826] EXT4-fs (loop1): Remounting filesystem read-only [ 110.735087][ T5826] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.602: couldn't truncate inode 15 (err -30) [ 110.747379][ T5826] EXT4-fs (loop1): 1 orphan inode deleted [ 110.748904][ T5826] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 110.765124][ T5826] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz.1.602: deleted inode referenced: 15 [ 110.777890][ T5826] EXT4-fs (loop1): Remounting filesystem read-only [ 111.188543][ T5838] loop0: detected capacity change from 0 to 8192 [ 111.310920][ T5838] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.354028][ T5854] udc-core: couldn't find an available UDC or it's busy [ 111.356389][ T5854] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.804882][ T4055] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 111.813450][ T4055] Bluetooth: hci5: Injecting HCI hardware error event [ 111.972286][ T3980] Bluetooth: hci5: hardware error 0x00 [ 112.220378][ T4052] Bluetooth: hci4: command 0x1001 tx timeout [ 112.230990][ T3985] Bluetooth: hci4: sending frame failed (-49) [ 112.445243][ T5865] loop0: detected capacity change from 0 to 512 [ 112.483582][ T5865] EXT4-fs (loop0): Ignoring removed oldalloc option [ 112.505810][ T5865] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.614: Parent and EA inode have the same ino 15 [ 112.514197][ T5865] EXT4-fs (loop0): Remounting filesystem read-only [ 112.519524][ T5865] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz.0.614: couldn't truncate inode 15 (err -30) [ 112.541885][ T5865] EXT4-fs (loop0): 1 orphan inode deleted [ 112.545340][ T5865] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 112.557276][ T5865] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.614: deleted inode referenced: 15 [ 112.574400][ T5865] EXT4-fs (loop0): Remounting filesystem read-only [ 114.250380][ T4045] Bluetooth: hci4: command 0x1009 tx timeout [ 114.876996][ T5913] udc-core: couldn't find an available UDC or it's busy [ 114.880883][ T5913] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.019397][ T5916] loop3: detected capacity change from 0 to 512 [ 115.033253][ T5916] EXT4-fs (loop3): Ignoring removed oldalloc option [ 115.040458][ T5907] loop2: detected capacity change from 0 to 8192 [ 115.044437][ T5916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.628: Parent and EA inode have the same ino 15 [ 115.048119][ T5916] EXT4-fs (loop3): Remounting filesystem read-only [ 115.049836][ T5916] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.628: couldn't truncate inode 15 (err -30) [ 115.055384][ T5916] EXT4-fs (loop3): 1 orphan inode deleted [ 115.056893][ T5916] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 115.890769][ T5907] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.901976][ T5916] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.628: deleted inode referenced: 15 [ 115.905935][ T5916] EXT4-fs (loop3): Remounting filesystem read-only [ 115.908500][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 117.236856][ T5944] udc-core: couldn't find an available UDC or it's busy [ 117.238813][ T5944] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.115380][ T5956] validate_nla: 3 callbacks suppressed [ 118.115394][ T5956] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 118.118844][ T5956] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.642'. [ 118.345157][ T5954] loop0: detected capacity change from 0 to 8192 [ 118.365167][ T5958] loop1: detected capacity change from 0 to 512 [ 118.410412][ T3980] [ 118.411034][ T3980] ============================================ [ 118.412537][ T3980] WARNING: possible recursive locking detected [ 118.414103][ T3980] 5.15.161-syzkaller #0 Not tainted [ 118.415423][ T3980] -------------------------------------------- [ 118.417043][ T3980] kworker/u5:4/3980 is trying to acquire lock: [ 118.418645][ T3980] ffff0000d979b938 ((wq_completion)hci5){+.+.}-{0:0}, at: flush_workqueue+0x120/0x11c4 [ 118.421187][ T3980] [ 118.421187][ T3980] but task is already holding lock: [ 118.423097][ T3980] ffff0000d979b938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 118.425598][ T3980] [ 118.425598][ T3980] other info that might help us debug this: [ 118.427745][ T3980] Possible unsafe locking scenario: [ 118.427745][ T3980] [ 118.429672][ T3980] CPU0 [ 118.430509][ T3980] ---- [ 118.431326][ T3980] lock((wq_completion)hci5); [ 118.432543][ T3980] lock((wq_completion)hci5); [ 118.433748][ T3980] [ 118.433748][ T3980] *** DEADLOCK *** [ 118.433748][ T3980] [ 118.435910][ T3980] May be due to missing lock nesting notation [ 118.435910][ T3980] [ 118.438217][ T3980] 2 locks held by kworker/u5:4/3980: [ 118.439519][ T3980] #0: ffff0000d979b938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 118.442120][ T3980] #1: ffff80001cc77c00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 118.445122][ T3980] [ 118.445122][ T3980] stack backtrace: [ 118.446655][ T3980] CPU: 0 PID: 3980 Comm: kworker/u5:4 Not tainted 5.15.161-syzkaller #0 [ 118.448831][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 118.451416][ T3980] Workqueue: hci5 hci_error_reset [ 118.452733][ T3980] Call trace: [ 118.453595][ T3980] dump_backtrace+0x0/0x530 [ 118.454737][ T3980] show_stack+0x2c/0x3c [ 118.455772][ T3980] dump_stack_lvl+0x108/0x170 [ 118.456976][ T3980] dump_stack+0x1c/0x58 [ 118.458070][ T3980] __lock_acquire+0x62bc/0x7638 [ 118.459290][ T3980] lock_acquire+0x240/0x77c [ 118.460459][ T3980] flush_workqueue+0x14c/0x11c4 [ 118.461741][ T3980] drain_workqueue+0xb8/0x32c [ 118.462979][ T3980] destroy_workqueue+0x80/0xa34 [ 118.464297][ T3980] hci_release_dev+0x118/0x116c [ 118.465596][ T3980] bt_host_release+0x70/0x88 [ 118.466832][ T3980] device_release+0x8c/0x1ac [ 118.468032][ T3980] kobject_put+0x2c4/0x438 [ 118.469167][ T3980] put_device+0x28/0x40 [ 118.470267][ T3980] hci_error_reset+0x124/0x2b8 [ 118.471513][ T3980] process_one_work+0x790/0x11b8 [ 118.472763][ T3980] worker_thread+0x910/0x1034 [ 118.473953][ T3980] kthread+0x37c/0x45c [ 118.474997][ T3980] ret_from_fork+0x10/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)