last executing test programs: 6.928982563s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x0, 0x12}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 5.769084387s ago: executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000004000000", 0x6033) 5.712257145s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a07, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900150000000000000d00000a02000000020000000000001800098008"], 0x34}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 4.516218813s ago: executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.70318515s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000040)) 1.680503583s ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x3000808, &(0x7f0000001340)=ANY=[], 0xc, 0x2ca, &(0x7f0000001040)="$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") ioprio_set$pid(0x2, 0x0, 0x4007) r0 = open(&(0x7f0000000200)='./bus\x00', 0x84142, 0x0) sendfile(r0, r0, 0x0, 0x1) 1.656536086s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.575638218s ago: executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) 1.430048468s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 1.428332858s ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000003c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 1.370122607s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES16], 0x1, 0x1253, &(0x7f0000002b00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.359824918s ago: executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0x0, 0xc}, 0x20) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x401, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x188, 0xe0, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 1.317857414s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x5910, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) 1.306936585s ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x4020400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x49) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 1.27591549s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x309, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.218997488s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x3000808, &(0x7f0000001340)=ANY=[], 0xc, 0x2ca, &(0x7f0000001040)="$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") ioprio_set$pid(0x2, 0x0, 0x4007) r0 = open(&(0x7f0000000200)='./bus\x00', 0x84142, 0x0) sendfile(r0, r0, 0x0, 0x1) 1.172512164s ago: executing program 0: openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', &(0x7f0000000140)={0x240c0}, 0x18) lsetxattr$security_ima(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x6, "159bcb0417552b9206075f2360eb9988b2539f17"}, 0x15, 0x0) open(&(0x7f00000000c0)='./file2\x00', 0x0, 0x0) 1.093338216s ago: executing program 0: mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da41496834f8a61d1f34b99064cb027f2aa77459cff33a3a98336c166ed5bef3d63520d260804d000"}, 0x48, 0xfffffffffffffffd) openat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 991.14355ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 936.424288ms ago: executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 564.18446ms ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0xd, 0x4) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) 452.202656ms ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 161.926007ms ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 139.34927ms ago: executing program 1: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syncfs(r0) 135.291041ms ago: executing program 3: openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000080b7040000000000008500000033000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 70.47482ms ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x5910, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) 59.951741ms ago: executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@nossd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x1000) 39.622804ms ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="12f8a2b2236d539f42b67e083fcd9b5de2cb490c038d25210290c4cc3afacede0f7d823ef5968c9a", 0x28}], 0x1}}, {{&(0x7f0000000440)=@abs, 0x18, 0x0}}], 0x2, 0x0) 18.392877ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_mount_image$hfsplus(&(0x7f0000000700), &(0x7f0000000080)='./file0\x00', 0x180000c, &(0x7f00000008c0)={[{}, {@nls={'nls', 0x3d, 'euc-jp'}}, {@barrier}, {@nobarrier}, {@umask={'umask', 0x3d, 0x6}}, {@force}, {@nodecompose}, {@force}, {@gid}]}, 0x2, 0x6e2, &(0x7f0000000c80)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsim10se9h5x6Sg+6hR5Keje054ZA8VXHQCGXnHRTmdmZ1Ui72l3ZeiX9/cTMfDPfc/6zM7MPxATwf2txOqpPI4nF6bc30vXtrbn22NbcRJ7djohaRFQiqp1FJCuR5d7Kp/h2ujEvn8R4/34+Wl5499lX21901qr5lNWrlOqPota7aTOfohkRY/my1yFji08Pdr+vvduHtjeqpLuHacCuFYGLv7xQq/DCdntsdvM++U82H1T9KOctcE4lnftmj6mIyYioR3Tu+vnVoXK6ozt+m2c9AAAAADiqxtGrvLQTO7ERF05iOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBNlT//P8mnSpFuRlI8/7+Wb4s8fQ4NfxDi5xOd5dOTHwwAAAAAAAAAnLjXd2InNuJCsb6bZL/5v1H6jf9b8UGsxVKsxvXYiFasx3qsxmxETJUaqm201tdXZ7Oa0bg0oObN+KxPzZuHj/HWce80AAAAAAAAAJxv9SH598d7t/0+Fvd+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPMgiRjrLLLpUpGeiko1IuoRUUvLbUZ8VqS/JpJ+G5+e/jgAAADghdT3ryb1Eeq89CR2YiMuFOu7SfaZ/0r2ebkeH8RKrMdyrEc7luJO/hk6/dRf2d6aa29vzT1Ip952f/rlkYaetRid7x769/xqVqIRd2M523I9bkcSu5lK3sqr21tz6fJB/3F9mI4p+UluwGjGSuk76ezqp1n6z/u/RageaRefU+XQnKksd7wbkZl8bGmNi0UE+kdi6NGpDuxpNirdb34uDe6pf8w/HNz75IFSfb+5ORMHI3EzKt0jdGVwJCK++49Pfn2vvXL/3t216fOzS309GVriYCTmSpG4+g2KxHAzWSQud9cX4xfxq5iOLyfeidVYjt9EK9ZjqVnkt/LXczqfGhypzyfLa+8MG0l6Tja7169+Y2rGvjFFM36epVrxRnZML8RyJPEwIpbirezvZsx2rwZ7R/jyCGd9ZYQrbcm172WLbpiicXjZv43W5HFJ43qxFNfyNXcqyytv2YvSy32jVNzrRr8flVS/kyfSFv4w8P5w2g5GYrYUiVcOe710QvrX3XS+1l65v3qv9f6I/b2ZL9Pz6E/n6i6RHuGXo57v3MVsnmTn1EyW90r3Drs/XrX8F5eOSk/e5W69zpn6y3gYd/adqT+M+ZiPhaz0laz0eM8dK8272m1p/zU8zUvfaVW7P+yU3289jHbn/RAA59vk9ydrjf82/t34uPHHxr3G2/WfTfxo4rVajP9r/MfVmbE3K68lf4+P43d7n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnt/bo8f1Wu7202j9R6Z+VDK7Vau8WDxIbUGZfIskflTNC4WTt0ePdoQ0OTkzkw3vO6seZKJ7WOLxw8wSHkWwePF714ceieMrTCF0kPQFPKz/3mIue97aMn4NDeTDRHFImiZEbLF6wpayjv3ob/Y7XWETfYQy5cIwdx9UHOEs31h+8f2Pt0eMfLD9ovbf03tLK+Pz8wszC/FtzN+4ut5dmOvNShVN5+C1wGspvJ7pqEfH68LoDHtQKAAAAAAAAAAAAnKDT+F+Is95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OttcTqqTyOJ2ZnrM+n69tZcO52K9F7JakRUIiL5bUTyz4hb8eTZrTRjqtRcclg/Hy0vvPvsq+0v9tqqFuUrEZuH1hvNZj5FMyLG8uVxtXd7eHu1veREn+ykG5k0YNfyJZy5/wUAAP//GP3tFA==") write$binfmt_script(r0, &(0x7f0000000e00), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0) 0s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): rms(): no params data found [ 130.329830][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.390173][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.431905][ T5156] device bridge_slave_0 entered promiscuous mode [ 130.472859][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.480928][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.493442][ T5156] device bridge_slave_1 entered promiscuous mode [ 130.591094][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.604314][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.654115][ T4924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.705337][ T5156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.727374][ T5156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.161617][ T3579] Bluetooth: hci4: command tx timeout [ 131.631819][ T5156] team0: Port device team_slave_0 added [ 131.640231][ T5156] team0: Port device team_slave_1 added [ 131.682724][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.706289][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.840223][ T4924] device veth0_vlan entered promiscuous mode [ 131.866952][ T5156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.874611][ T5156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.960796][ T5156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.990945][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.007808][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.031645][ T4924] device veth1_vlan entered promiscuous mode [ 132.053143][ T5156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.069168][ T5156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.129605][ T5156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.176562][ T5234] loop1: detected capacity change from 0 to 2048 [ 132.199696][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.228492][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.265948][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.387621][ T5156] device hsr_slave_0 entered promiscuous mode [ 132.423352][ T5156] device hsr_slave_1 entered promiscuous mode [ 132.447948][ T5156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.460774][ T5156] Cannot create hsr debugfs directory [ 132.490119][ T4924] device veth0_macvtap entered promiscuous mode [ 132.539509][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.589526][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.599040][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.599084][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.652754][ T5250] 9pnet_fd: Insufficient options for proto=fd [ 132.677715][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.829485][ T4924] device veth1_macvtap entered promiscuous mode [ 132.902282][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.917467][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.086267][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.146786][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.200755][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.231277][ T3569] Bluetooth: hci4: command tx timeout [ 133.244076][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.278122][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.298375][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.308525][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.349682][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.389021][ T4924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.538506][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.618327][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.629933][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.723663][ T5292] 9pnet_fd: Insufficient options for proto=fd [ 133.823626][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.892067][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.927908][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.953029][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.997398][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.028192][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.049471][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.068668][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.090053][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.115298][ T4924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.149611][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.167408][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.189963][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.220352][ T4924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.242754][ T4924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.258428][ T4924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.267888][ T4924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.324889][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.490020][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.531336][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.546715][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.583088][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.601487][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.634821][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.849545][ T3656] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.131453][ T3656] usb 2-1: Using ep0 maxpacket: 16 [ 135.305617][ T3656] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.341393][ T3569] Bluetooth: hci4: command tx timeout [ 135.462483][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.616743][ T5319] loop0: detected capacity change from 0 to 1024 [ 135.661862][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 150, changing to 11 [ 135.677334][ T3656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25816, setting to 1024 [ 135.688848][ T3656] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.730439][ T5319] hfsplus: bad catalog entry type [ 135.781146][ T3656] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.790219][ T3656] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.816628][ T3656] usb 2-1: Manufacturer: syz [ 135.832979][ T102] hfsplus: b-tree write err: -5, ino 4 [ 135.839402][ T3656] usb 2-1: config 0 descriptor?? [ 136.111927][ T5156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.141434][ T5156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.156328][ T5336] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.184777][ T5156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.255004][ T5156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.301108][ T3656] rc_core: IR keymap rc-hauppauge not found [ 136.307040][ T3656] Registered IR keymap rc-empty [ 136.332447][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.375605][ T5343] smb3: Unexpected value for 'acl' [ 136.381095][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.421917][ T3656] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 136.463177][ T3656] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 136.561989][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.605382][ T5156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.621666][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.637025][ T27] audit: type=1800 audit(1718585459.056:19): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 136.660160][ T35] device hsr_slave_0 left promiscuous mode [ 136.671156][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.680608][ T35] device hsr_slave_1 left promiscuous mode [ 136.701037][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.710853][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.729174][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.731914][ T5361] 9pnet: p9_errstr2errno: server reported unknown error aÎc£/Õ¸šš³Y´î ÆéWgÔ+NT†'Ûý.mqZ=êÝq0…oud607gÒâO)åÚÙynÛizî +«ÑŒ [ 136.757545][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.770836][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.789963][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.817789][ T35] device bridge_slave_1 left promiscuous mode [ 136.831006][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 136.848890][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.877130][ T35] device bridge_slave_0 left promiscuous mode [ 136.896048][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.918543][ T35] device veth1_macvtap left promiscuous mode [ 136.941052][ T35] device veth0_macvtap left promiscuous mode [ 136.973493][ T35] device veth1_vlan left promiscuous mode [ 136.999920][ T35] device veth0_vlan left promiscuous mode [ 137.018051][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 137.072942][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 137.202603][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 137.332996][ T3656] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 137.390771][ T3579] Bluetooth: hci4: command tx timeout [ 137.457053][ T3656] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 137.562057][ T3656] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.771928][ T3656] usb 2-1: USB disconnect, device number 2 [ 138.179336][ T5394] 9pnet: p9_errstr2errno: server reported unknown error aÎc£/Õ¸šš³Y´î ÆéWgÔ+NT†'Ûý.mqZ=êÝq0…oud607gÒâO)åÚÙynÛizî +«ÑŒ [ 138.264953][ T5391] loop0: detected capacity change from 0 to 2048 [ 138.360584][ T5391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.384756][ T35] team0 (unregistering): Port device team_slave_1 removed [ 138.500153][ T5401] overlayfs: failed to clone upperpath [ 139.057279][ T35] team0 (unregistering): Port device team_slave_0 removed [ 139.082778][ T5407] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 139.122004][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.198878][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.452349][ T27] audit: type=1800 audit(1718585461.876:20): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 139.493529][ T35] bond0 (unregistering): Released all slaves [ 139.595456][ T27] audit: type=1800 audit(1718585462.016:21): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 139.668206][ T5156] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.736742][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.769055][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.799289][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.822610][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.852038][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.859152][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.916343][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.941517][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.991293][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.022970][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.030084][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.066858][ T5456] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.071045][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.134116][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.144113][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.177391][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.220550][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.238977][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.294546][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.317994][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.369567][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.399766][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.478003][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.510004][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.605093][ T5498] loop0: detected capacity change from 0 to 256 [ 141.610959][ T27] audit: type=1800 audit(1718585464.036:22): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 141.871334][ T5506] fuse: Invalid group_id [ 142.053392][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.055581][ T5515] loop1: detected capacity change from 0 to 2048 [ 142.062121][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.109714][ T5156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.139283][ T5515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.262293][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.302558][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.330608][ T5156] device veth0_vlan entered promiscuous mode [ 142.344559][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.376510][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.423140][ T5156] device veth1_vlan entered promiscuous mode [ 142.446212][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.458891][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.494023][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.516972][ T27] audit: type=1800 audit(1718585464.936:23): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 142.558842][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.604032][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.613514][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.625155][ T5156] device veth0_macvtap entered promiscuous mode [ 142.675350][ T5156] device veth1_macvtap entered promiscuous mode [ 142.786469][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.797128][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.807788][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.818404][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.831680][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.842189][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.852132][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.971393][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.284069][ T5156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.377597][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.471471][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.482705][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.492574][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.503034][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.512891][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.523335][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.533603][ T5156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.610729][ T5156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.672424][ T5156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.679787][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.693254][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.710355][ T5558] fuse: Invalid group_id [ 143.750751][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.759518][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.806670][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.832749][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.893903][ T5156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.913006][ T5156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.945015][ T5156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.978203][ T5156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.009840][ T5574] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 144.149111][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.188586][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.199879][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.226355][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.262221][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.290555][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.377814][ T5583] loop0: detected capacity change from 0 to 2048 [ 144.450998][ T5583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.691043][ T3614] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 145.184915][ T3614] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 145.232136][ T3614] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.282975][ T5622] loop1: detected capacity change from 0 to 64 [ 145.431734][ T3614] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.458295][ T3614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.497171][ T3614] usb 4-1: Product: syz [ 145.501462][ T3614] usb 4-1: Manufacturer: syz [ 145.543750][ T3614] usb 4-1: SerialNumber: syz [ 145.581374][ T5589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.842907][ T3614] usb 4-1: selecting invalid altsetting 1 [ 145.860859][ T3614] cdc_ncm 4-1:1.0: bind() failure [ 145.925289][ T3614] hub 4-1:1.1: bad descriptor, ignoring hub [ 145.934833][ T3614] hub: probe of 4-1:1.1 failed with error -5 [ 145.991553][ T3614] usb 4-1: USB disconnect, device number 6 [ 146.000621][ T27] audit: type=1326 audit(1718585468.416:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x0 [ 146.102615][ T27] audit: type=1326 audit(1718585468.526:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x0 [ 146.656418][ T5664] binder: 5658:5664 ioctl 541a 20000400 returned -22 [ 146.814017][ T5664] device wireguard0 entered promiscuous mode [ 146.910061][ T5661] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 147.550949][ T3569] Bluetooth: hci5: command 0x1003 tx timeout [ 147.558276][ T3579] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.268243][ T5707] binder: 5703:5707 ioctl 541a 20000400 returned -22 [ 148.373675][ T5707] device wireguard0 entered promiscuous mode [ 148.497563][ T5682] loop3: detected capacity change from 0 to 32768 [ 148.853236][ T5682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5682) [ 149.058700][ T5682] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.079195][ T5682] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 149.088611][ T5682] BTRFS info (device loop3): turning on flush-on-commit [ 149.098741][ T5682] BTRFS info (device loop3): turning off barriers [ 149.124132][ T5682] BTRFS info (device loop3): doing ref verification [ 149.163228][ T5682] BTRFS info (device loop3): force clearing of disk cache [ 149.186843][ T27] audit: type=1800 audit(1718585471.606:26): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 149.199087][ T5682] BTRFS info (device loop3): enabling disk space caching [ 149.276561][ T5682] BTRFS info (device loop3): turning on sync discard [ 149.288997][ T5682] BTRFS info (device loop3): using default commit interval 30s [ 149.317204][ T26] kernel write not supported for file [eventfd] (pid: 26 comm: kworker/1:1) [ 149.390340][ T5682] BTRFS info (device loop3): disk space caching is enabled [ 149.402700][ T3579] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 149.411311][ T3579] Bluetooth: hci1: Injecting HCI hardware error event [ 149.420458][ T3583] Bluetooth: hci1: hardware error 0x00 [ 149.569877][ T27] audit: type=1326 audit(1718585471.986:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5738 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x0 [ 149.655437][ T5757] binder: 5745:5757 ioctl 541a 20000400 returned -22 [ 150.372289][ T5757] device wireguard0 entered promiscuous mode [ 150.426708][ T5682] BTRFS info (device loop3): enabling ssd optimizations [ 150.450596][ T5682] BTRFS info (device loop3): rebuilding free space tree [ 150.511834][ T3579] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 150.520483][ T3579] Bluetooth: hci4: Injecting HCI hardware error event [ 150.530233][ T3569] Bluetooth: hci4: hardware error 0x00 [ 150.572275][ T5682] BTRFS info (device loop3): disabling free space tree [ 150.594219][ T5682] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.606298][ T5682] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.693222][ T5156] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.966852][ T5773] loop0: detected capacity change from 0 to 40427 [ 151.003819][ T5773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 151.011808][ T5773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.133337][ T5773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.179205][ T5773] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 151.223439][ T5773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.230516][ T5773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.462515][ T5805] Illegal XDP return value 1096871574 on prog (id 135) dev N/A, expect packet loss! [ 151.480918][ T3583] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 151.897609][ T3583] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 151.906784][ T3583] Bluetooth: hci2: Injecting HCI hardware error event [ 151.920330][ T3583] Bluetooth: hci2: hardware error 0x00 [ 152.073764][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.073803][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.121877][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.131342][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.138913][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.146957][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.157293][ T4924] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.185570][ T5817] loop3: detected capacity change from 0 to 64 [ 152.303367][ T27] audit: type=1804 audit(1718585474.726:28): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir722967150/syzkaller.djhov4/8/file2/bus" dev="loop3" ino=3 res=1 errno=0 [ 152.395026][ T27] audit: type=1804 audit(1718585474.786:29): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir722967150/syzkaller.djhov4/8/file2/bus" dev="loop3" ino=3 res=1 errno=0 [ 152.504286][ T27] audit: type=1800 audit(1718585474.796:30): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="loop3" ino=3 res=0 errno=0 [ 152.591057][ T3569] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.871582][ T5796] loop1: detected capacity change from 0 to 32768 [ 153.024696][ T5796] XFS (loop1): Mounting V5 Filesystem [ 153.208592][ T5796] XFS (loop1): Ending clean mount [ 153.237053][ T5843] loop3: detected capacity change from 0 to 40427 [ 153.250463][ T5843] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 153.254604][ T5796] XFS (loop1): Quotacheck needed: Please wait. [ 153.258936][ T5843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.288751][ T5843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.320496][ T5852] loop0: detected capacity change from 0 to 2048 [ 153.328179][ T5843] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 153.360718][ T5843] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.367810][ T5843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.373831][ T5796] XFS (loop1): Quotacheck: Done. [ 153.386759][ T5852] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 153.423924][ T5852] EXT4-fs (loop0): group descriptors corrupted! [ 153.490914][ T3569] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 153.500158][ T3569] Bluetooth: hci0: Injecting HCI hardware error event [ 153.509347][ T3567] Bluetooth: hci0: hardware error 0x00 [ 154.254295][ T3583] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 154.342171][ T5156] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 154.342194][ T5156] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 154.363860][ T5156] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 154.583838][ T4447] XFS (loop1): Unmounting Filesystem [ 155.701180][ T5883] loop1: detected capacity change from 0 to 64 [ 155.891545][ T35] kworker/u4:2: attempt to access beyond end of device [ 155.891545][ T35] loop1: rw=1, sector=4172, nr_sectors = 16 limit=64 [ 155.939424][ T35] kworker/u4:2: attempt to access beyond end of device [ 155.939424][ T35] loop1: rw=1, sector=4188, nr_sectors = 1 limit=64 [ 155.984549][ T35] Buffer I/O error on dev loop1, logical block 4188, lost async page write [ 156.003670][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.003670][ T35] loop1: rw=1, sector=4189, nr_sectors = 1 limit=64 [ 156.038090][ T35] Buffer I/O error on dev loop1, logical block 4189, lost async page write [ 156.050767][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.050767][ T35] loop1: rw=1, sector=4190, nr_sectors = 1 limit=64 [ 156.066315][ T5897] loop3: detected capacity change from 0 to 2048 [ 156.080753][ T35] Buffer I/O error on dev loop1, logical block 4190, lost async page write [ 156.098012][ T5897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.122154][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.122154][ T35] loop1: rw=1, sector=4191, nr_sectors = 1 limit=64 [ 156.147458][ T35] Buffer I/O error on dev loop1, logical block 4191, lost async page write [ 156.174064][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.174064][ T35] loop1: rw=1, sector=4192, nr_sectors = 1 limit=64 [ 156.216035][ T35] Buffer I/O error on dev loop1, logical block 4192, lost async page write [ 156.242030][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.242030][ T35] loop1: rw=1, sector=4193, nr_sectors = 1 limit=64 [ 156.320728][ T35] Buffer I/O error on dev loop1, logical block 4193, lost async page write [ 156.339226][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.339226][ T35] loop1: rw=1, sector=4196, nr_sectors = 1 limit=64 [ 156.357215][ T3567] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 156.469012][ T35] Buffer I/O error on dev loop1, logical block 4196, lost async page write [ 156.487898][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.487898][ T35] loop1: rw=1, sector=4197, nr_sectors = 1 limit=64 [ 156.529787][ T35] Buffer I/O error on dev loop1, logical block 4197, lost async page write [ 156.547068][ T5892] loop0: detected capacity change from 0 to 32768 [ 156.557871][ T35] kworker/u4:2: attempt to access beyond end of device [ 156.557871][ T35] loop1: rw=1, sector=4198, nr_sectors = 103 limit=64 [ 156.599245][ T35] Buffer I/O error on dev loop1, logical block 4360, lost async page write [ 156.609220][ T35] Buffer I/O error on dev loop1, logical block 4361, lost async page write [ 156.662166][ T5892] add_index: next_index = 0. Resetting! [ 156.712674][ T5927] non-latin1 character 0x3ff found in JFS file name [ 156.749244][ T5927] mount with iocharset=utf8 to access [ 156.921723][ T5939] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.238158][ T5960] loop0: detected capacity change from 0 to 16 [ 158.332906][ T5972] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.549693][ T5962] loop1: detected capacity change from 0 to 32768 [ 158.594630][ T5962] add_index: next_index = 0. Resetting! [ 158.639178][ T5962] non-latin1 character 0x3ff found in JFS file name [ 158.670617][ T5962] mount with iocharset=utf8 to access [ 158.759718][ T27] audit: type=1804 audit(1718585481.176:31): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=1958 res=1 errno=0 [ 158.988760][ T5964] loop3: detected capacity change from 0 to 40427 [ 159.030827][ T5964] F2FS-fs (loop3): Invalid log blocks per segment (5) [ 159.041319][ T5964] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.144578][ T5964] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.275307][ T5964] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.295259][ T5964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.330845][ T3785] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.629055][ T6002] loop1: detected capacity change from 0 to 64 [ 159.701047][ T3785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.880974][ T3785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.891922][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.899935][ T3785] usb 1-1: Product: syz [ 159.915123][ T3785] usb 1-1: Manufacturer: syz [ 159.922981][ T3785] usb 1-1: SerialNumber: syz [ 160.001896][ T3785] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 160.008584][ T27] audit: type=1804 audit(1718585482.426:32): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=1 errno=0 [ 160.212612][ T3624] usb 1-1: USB disconnect, device number 3 [ 160.694195][ T6050] ALSA: seq fatal error: cannot create timer (-16) [ 160.961565][ T6060] loop3: detected capacity change from 0 to 4096 [ 160.969056][ T6060] ntfs: (device loop3): parse_options(): Invalid uid option argument: ÿÿ [ 161.046628][ T3551] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.084502][ T27] audit: type=1326 audit(1718585483.506:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x0 [ 161.446386][ T6082] loop3: detected capacity change from 0 to 256 [ 161.483152][ T6082] FAT-fs (loop3): Unrecognized mount option "#! [ 161.483152][ T6082] " or missing value [ 162.563101][ T6151] loop1: detected capacity change from 0 to 256 [ 162.659108][ T3551] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.001475][ T6177] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 163.174287][ T6183] loop1: detected capacity change from 0 to 512 [ 163.204519][ T6183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.236992][ T6183] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.338790][ T6183] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 163.360347][ T6183] Quota error (device loop1): write_blk: dquota write failed [ 163.369119][ T6183] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 163.380140][ T6183] Quota error (device loop1): write_blk: dquota write failed [ 163.391589][ T6183] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 163.403043][ T6183] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1 [ 163.426437][ T6183] EXT4-fs (loop1): 1 truncate cleaned up [ 163.432283][ T6183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.522331][ T4447] EXT4-fs (loop1): unmounting filesystem. [ 163.751305][ T6179] loop0: detected capacity change from 0 to 32768 [ 164.250943][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.390769][ T6193] syz-executor.3 (6193) used greatest stack depth: 18944 bytes left [ 164.620917][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.802033][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.827331][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.846089][ T26] usb 2-1: Product: syz [ 164.860984][ T26] usb 2-1: Manufacturer: syz [ 164.865636][ T26] usb 2-1: SerialNumber: syz [ 164.941633][ T26] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 165.178294][ T26] usb 2-1: USB disconnect, device number 3 [ 165.296257][ T6252] loop3: detected capacity change from 0 to 512 [ 165.316685][ T6252] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.358166][ T6252] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 165.410541][ T6252] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 165.479252][ T6250] loop3: detected capacity change from 0 to 256 [ 165.558577][ T6250] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 165.587124][ T6250] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 165.648984][ T6250] bio_check_eod: 51 callbacks suppressed [ 165.649001][ T6250] syz-executor.3: attempt to access beyond end of device [ 165.649001][ T6250] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 165.795161][ T6250] syz-executor.3: attempt to access beyond end of device [ 165.795161][ T6250] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 165.823220][ T6250] syz-executor.3: attempt to access beyond end of device [ 165.823220][ T6250] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 165.857206][ T27] audit: type=1800 audit(1718585488.276:34): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=1048621 res=0 errno=0 [ 165.877513][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.035366][ T6270] loop1: detected capacity change from 0 to 2048 [ 166.072051][ T6270] EXT4-fs: Ignoring removed orlov option [ 166.077780][ T6270] ext4: Bad value for 'commit' [ 166.195337][ T6268] loop1: detected capacity change from 0 to 128 [ 166.499427][ T6297] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 166.938211][ T6270] loop1: detected capacity change from 0 to 2048 [ 166.969998][ T6313] loop0: detected capacity change from 0 to 1024 [ 166.982526][ T6270] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 167.019317][ T6313] EXT4-fs: Ignoring removed nobh option [ 167.033092][ T6270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.084480][ T6313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.388117][ T4447] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 167.407733][ T4447] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 168.127150][ T4924] EXT4-fs (loop0): unmounting filesystem. [ 168.210584][ T27] audit: type=1804 audit(1718585490.626:35): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file1" dev="sda1" ino=1951 res=1 errno=0 [ 168.271016][ T3788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.293391][ T3663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.347071][ T6338] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 168.417194][ T3663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.511013][ T3788] usb 4-1: Using ep0 maxpacket: 16 [ 168.631003][ T3788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.752369][ T3788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.934509][ T3788] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.038921][ T3788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.178155][ T3788] usb 4-1: config 0 descriptor?? [ 169.286516][ T3663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.362105][ T3583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.401543][ T3569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.410030][ T3569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.417949][ T3569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.425484][ T3569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.643205][ T3569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.744453][ T6360] loop0: detected capacity change from 0 to 256 [ 169.865222][ T6360] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.097800][ T3663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.511090][ T3788] usbhid 4-1:0.0: can't add hid device: -71 [ 170.518144][ T3788] usbhid: probe of 4-1:0.0 failed with error -71 [ 170.586470][ T3788] usb 4-1: USB disconnect, device number 7 [ 171.109220][ T6365] overlayfs: failed to clone upperpath [ 171.515132][ T6375] loop3: detected capacity change from 0 to 1024 [ 171.591472][ T6375] EXT4-fs: Ignoring removed nobh option [ 171.642694][ T6353] chnl_net:caif_netlink_parms(): no params data found [ 171.711440][ T3567] Bluetooth: hci2: command tx timeout [ 171.750413][ T6375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.553206][ T6362] syz-executor.4 (6362) used greatest stack depth: 18872 bytes left [ 172.562311][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.610873][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.661479][ T6353] device bridge_slave_0 entered promiscuous mode [ 172.722531][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.729695][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.741659][ T5156] EXT4-fs (loop3): unmounting filesystem. [ 172.782026][ T6353] device bridge_slave_1 entered promiscuous mode [ 172.943958][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.018347][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.062491][ T6379] loop0: detected capacity change from 0 to 32768 [ 173.085857][ T6379] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6379) [ 173.135570][ T6353] team0: Port device team_slave_0 added [ 173.174622][ T6353] team0: Port device team_slave_1 added [ 173.206646][ T6379] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.245146][ T6379] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 173.288543][ T6379] BTRFS info (device loop0): enabling ssd optimizations [ 173.307918][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.316451][ T6379] BTRFS info (device loop0): not using ssd optimizations [ 173.348594][ T6379] BTRFS info (device loop0): enabling auto defrag [ 173.359763][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.380732][ T6379] BTRFS info (device loop0): turning off barriers [ 173.429146][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.448209][ T6379] BTRFS info (device loop0): use zlib compression, level 3 [ 173.450379][ T6433] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 173.464634][ T6379] BTRFS info (device loop0): using free space tree [ 173.501739][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.508747][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.660908][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.791201][ T3567] Bluetooth: hci2: command tx timeout [ 173.839404][ T6353] device hsr_slave_0 entered promiscuous mode [ 173.868389][ T6353] device hsr_slave_1 entered promiscuous mode [ 173.890557][ T6379] BTRFS info (device loop0): checking UUID tree [ 173.945715][ T3663] device hsr_slave_0 left promiscuous mode [ 173.971935][ T3663] device hsr_slave_1 left promiscuous mode [ 173.998853][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.006302][ T27] audit: type=1800 audit(1718585496.426:36): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 174.054441][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.082829][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.103746][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.136929][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.151639][ T3663] device bridge_slave_1 left promiscuous mode [ 174.167442][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.210485][ T3663] device bridge_slave_0 left promiscuous mode [ 174.235136][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.283627][ T3663] device veth1_macvtap left promiscuous mode [ 174.306190][ T3663] device veth0_macvtap left promiscuous mode [ 174.329752][ T3663] device veth1_vlan left promiscuous mode [ 174.336199][ T3663] device veth0_vlan left promiscuous mode [ 174.375159][ T4924] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.733672][ T6506] loop3: detected capacity change from 0 to 2048 [ 175.806429][ T6510] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.847070][ T3663] team0 (unregistering): Port device team_slave_1 removed [ 175.853647][ T6506] NILFS (loop3): unrecognized mount option "ÿÿÿÿÿñ¼Þ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 175.853647][ T6506] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" [ 175.879129][ T3663] team0 (unregistering): Port device team_slave_0 removed [ 175.887504][ T3567] Bluetooth: hci2: command tx timeout [ 175.927797][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.018219][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.181620][ T3663] bond0 (unregistering): Released all slaves [ 176.223249][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.307234][ T6496] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 176.450353][ T27] audit: type=1800 audit(1718585498.866:37): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 176.480723][ T6523] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 177.925264][ T6520] loop3: detected capacity change from 0 to 32768 [ 177.961872][ T3567] Bluetooth: hci2: command tx timeout [ 177.989445][ T6520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6520) [ 178.053871][ T6353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.083942][ T6353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.097016][ T6520] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.153660][ T6353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.163183][ T6520] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 178.201196][ T6353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.208274][ T6520] BTRFS info (device loop3): enabling ssd optimizations [ 178.240799][ T6520] BTRFS info (device loop3): not using ssd optimizations [ 178.247878][ T6520] BTRFS info (device loop3): enabling auto defrag [ 178.305977][ T6550] loop0: detected capacity change from 0 to 4096 [ 178.314831][ T6520] BTRFS info (device loop3): turning off barriers [ 178.359482][ T6520] BTRFS info (device loop3): use zlib compression, level 3 [ 178.389428][ T6520] BTRFS info (device loop3): using free space tree [ 178.422195][ T6550] ntfs3: loop0: Failed to load $Extend. [ 178.539095][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.670346][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.730604][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.755943][ T6353] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.796700][ T6520] BTRFS info (device loop3): checking UUID tree [ 178.831362][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.841526][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.845500][ T6583] overlayfs: workdir and upperdir must reside under the same mount [ 178.906680][ T27] audit: type=1800 audit(1718585501.326:38): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 178.914858][ T3785] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.934484][ T3785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.041386][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.049461][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.093232][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.120306][ T5156] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.178613][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.185779][ T3780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.252185][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.282375][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.351256][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.383770][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.397133][ T3944] kernel write not supported for file bpf-prog (pid: 3944 comm: kworker/1:12) [ 179.446714][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.467758][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.506946][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.561585][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.589838][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.624854][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.654792][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.684868][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.868524][ T6622] overlayfs: failed to clone upperpath [ 179.917653][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.009229][ T6626] batman_adv: batadv1: Adding interface: netdevsim0 [ 180.041945][ T6626] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.172776][ T6626] batman_adv: batadv1: Interface activated: netdevsim0 [ 180.250166][ T6640] loop0: detected capacity change from 0 to 2048 [ 180.288408][ T3944] kernel write not supported for file bpf-prog (pid: 3944 comm: kworker/1:12) [ 180.379082][ T6650] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.440829][ T6640] NILFS (loop0): unrecognized mount option "ÿÿÿÿÿñ¼Þ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 180.440829][ T6640] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" [ 180.599266][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.661468][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.677117][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.760933][ T3569] Bluetooth: hci3: command 0x0406 tx timeout [ 180.967266][ T6665] overlayfs: workdir and upperdir must reside under the same mount [ 180.978739][ T6353] device veth0_vlan entered promiscuous mode [ 181.470523][ T6353] device veth1_vlan entered promiscuous mode [ 181.531758][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.540488][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.549708][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.558171][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.566775][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.579532][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.587389][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.671246][ T6353] device veth0_macvtap entered promiscuous mode [ 181.711132][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.731514][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.753369][ T6353] device veth1_macvtap entered promiscuous mode [ 181.770853][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.811497][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.827785][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.860847][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.880346][ T26] kernel write not supported for file bpf-prog (pid: 26 comm: kworker/1:1) [ 181.898589][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.932237][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.961164][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.001092][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.040270][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.063837][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.089593][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.101713][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.139061][ T6689] batman_adv: batadv2: Adding interface: netdevsim0 [ 182.169584][ T6689] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.229071][ T6689] batman_adv: batadv2: Interface activated: netdevsim0 [ 182.320016][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.769063][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.779766][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.849266][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.893305][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.938904][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.980110][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.004796][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.038753][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.080810][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.108083][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.126382][ T6353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.135180][ T6353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.145089][ T6353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.183387][ T6353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.218410][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.244726][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.476227][ T6720] loop0: detected capacity change from 0 to 4096 [ 183.492500][ T6726] overlayfs: failed to clone upperpath [ 183.516190][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.558227][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.605447][ T6720] ntfs: volume version 3.1. [ 183.644034][ T3950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.723778][ T3969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.762624][ T3969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.848826][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.363759][ T6767] loop3: detected capacity change from 0 to 164 [ 185.594721][ T6774] loop3: detected capacity change from 0 to 512 [ 185.690341][ T6774] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 185.736259][ T6774] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.3: missing EA_INODE flag [ 185.752830][ T6774] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 2 err=-117 [ 185.771598][ T6751] loop1: detected capacity change from 0 to 32768 [ 185.783985][ T6751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6751) [ 185.790005][ T6745] loop0: detected capacity change from 0 to 32768 [ 185.812701][ T6774] EXT4-fs (loop3): 1 orphan inode deleted [ 185.824062][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.846919][ T6745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6745) [ 185.854482][ T6751] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.869974][ T6751] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 185.891514][ T6751] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 185.912533][ T6779] overlayfs: failed to clone upperpath [ 185.919027][ T6745] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.948558][ T6751] BTRFS info (device loop1): force zstd compression, level 3 [ 185.961702][ T6745] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 185.980320][ T6751] BTRFS info (device loop1): force zlib compression, level 3 [ 185.998324][ T6745] BTRFS info (device loop0): using free space tree [ 186.010793][ T6751] BTRFS info (device loop1): force clearing of disk cache [ 186.017934][ T6751] BTRFS info (device loop1): turning off barriers [ 186.044914][ T5156] EXT4-fs (loop3): unmounting filesystem. [ 186.101961][ T6751] BTRFS info (device loop1): enabling ssd optimizations [ 186.108954][ T6751] BTRFS info (device loop1): using free space tree [ 186.135969][ T6797] loop3: detected capacity change from 0 to 16 [ 186.193024][ T6797] erofs: (device loop3): mounted with root inode @ nid 36. [ 186.305612][ T6745] BTRFS info (device loop0): enabling ssd optimizations [ 186.492407][ T6751] BTRFS info (device loop1): rebuilding free space tree [ 186.602161][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.280732][ T27] audit: type=1800 audit(1718585509.696:39): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 187.426299][ T9] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 187.468156][ T27] audit: type=1804 audit(1718585509.886:40): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2389564993/syzkaller.SnK9ml/119/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 187.540527][ T6353] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.561369][ T27] audit: type=1804 audit(1718585509.976:41): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2389564993/syzkaller.SnK9ml/119/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 188.052474][ T6876] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.215690][ T6886] loop3: detected capacity change from 0 to 164 [ 188.459716][ T27] audit: type=1326 audit(1718585517.877:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 188.503498][ T4924] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.550829][ T27] audit: type=1326 audit(1718585517.877:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 188.625348][ T27] audit: type=1326 audit(1718585517.877:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 188.852837][ T27] audit: type=1326 audit(1718585517.877:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 188.956872][ T27] audit: type=1326 audit(1718585517.877:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 188.957653][ T6915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.030527][ T27] audit: type=1326 audit(1718585517.877:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 189.090620][ T27] audit: type=1326 audit(1718585517.937:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a63a7cea9 code=0x7ffc0000 [ 189.257062][ T6926] loop0: detected capacity change from 0 to 4096 [ 189.310325][ T6926] ntfs: volume version 3.1. [ 189.625944][ T6902] loop1: detected capacity change from 0 to 32768 [ 190.026510][ T6902] XFS (loop1): Mounting V5 Filesystem [ 190.466230][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.486590][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.498164][ T6902] XFS (loop1): Ending clean mount [ 190.570053][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.686345][ T6902] syz-executor.1 (6902) used greatest stack depth: 18168 bytes left [ 190.708810][ T6353] XFS (loop1): Unmounting Filesystem [ 190.947373][ T6983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.300554][ T6991] loop0: detected capacity change from 0 to 32768 [ 192.320012][ T6991] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6991) [ 192.375121][ T6991] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.416023][ T6991] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 192.448032][ T6991] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.480755][ T6991] BTRFS info (device loop0): force zstd compression, level 3 [ 192.488181][ T6991] BTRFS info (device loop0): force zlib compression, level 3 [ 192.526045][ T6991] BTRFS info (device loop0): force clearing of disk cache [ 192.549267][ T6991] BTRFS info (device loop0): turning off barriers [ 192.569760][ T6991] BTRFS info (device loop0): enabling ssd optimizations [ 192.620813][ T6991] BTRFS info (device loop0): using free space tree [ 193.296065][ T6991] BTRFS info (device loop0): rebuilding free space tree [ 193.530523][ T27] kauditd_printk_skb: 75 callbacks suppressed [ 193.530538][ T27] audit: type=1800 audit(1718585529.947:124): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 193.562149][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.639084][ T4924] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.664558][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.816722][ T3569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.841338][ T3569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.851414][ T3569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.859733][ T3569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.867620][ T3569] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.881140][ T3569] Bluetooth: hci2: command tx timeout [ 193.881280][ T3583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.902996][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.934930][ T7048] loop1: detected capacity change from 0 to 32768 [ 193.957394][ T7048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7048) [ 194.029914][ T7048] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.051006][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057675][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.092872][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.141217][ T7048] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 194.151162][ T7048] BTRFS info (device loop1): using free space tree [ 194.503128][ T7048] BTRFS info (device loop1): enabling ssd optimizations [ 194.514142][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.577340][ T7096] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.586793][ T7096] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.595617][ T7096] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.604425][ T7096] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.625408][ T7096] device vxlan0 entered promiscuous mode [ 194.769669][ T3663] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 194.875143][ T27] audit: type=1804 audit(1718585531.297:125): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3186385316/syzkaller.NtwM0k/9/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 194.960864][ T7056] chnl_net:caif_netlink_parms(): no params data found [ 195.035268][ T27] audit: type=1804 audit(1718585531.457:126): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3186385316/syzkaller.NtwM0k/9/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 195.219398][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.241859][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.278913][ T7056] device bridge_slave_0 entered promiscuous mode [ 195.334045][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.351011][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.368336][ T7056] device bridge_slave_1 entered promiscuous mode [ 195.520411][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.542701][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.905535][ T3583] Bluetooth: hci0: command tx timeout [ 197.330312][ T6353] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.646391][ T7056] team0: Port device team_slave_0 added [ 197.678923][ T7056] team0: Port device team_slave_1 added [ 197.809378][ T7139] loop3: detected capacity change from 0 to 2048 [ 197.817003][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.840820][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.873612][ T7142] block nbd0: shutting down sockets [ 197.879806][ T7143] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.912525][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.932587][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.939935][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.966510][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.074804][ T7056] device hsr_slave_0 entered promiscuous mode [ 198.104465][ T7056] device hsr_slave_1 entered promiscuous mode [ 198.112296][ T7056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.121260][ T7056] Cannot create hsr debugfs directory [ 198.190324][ T7157] loop0: detected capacity change from 0 to 4096 [ 198.251117][ T7157] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 198.355232][ T7157] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 198.364937][ T11] device hsr_slave_0 left promiscuous mode [ 198.389781][ T11] device hsr_slave_1 left promiscuous mode [ 198.402338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.409839][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.427870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.450778][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.467910][ T11] device bridge_slave_1 left promiscuous mode [ 198.480472][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.501659][ T11] device bridge_slave_0 left promiscuous mode [ 198.507900][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.543451][ T11] device veth1_macvtap left promiscuous mode [ 198.549509][ T11] device veth0_macvtap left promiscuous mode [ 198.556035][ T11] device veth1_vlan left promiscuous mode [ 198.569276][ T11] device veth0_vlan left promiscuous mode [ 198.575566][ T7176] block nbd1: shutting down sockets [ 198.991220][ T3583] Bluetooth: hci0: command tx timeout [ 199.064738][ T11] team0 (unregistering): Port device team_slave_1 removed [ 199.080476][ T11] team0 (unregistering): Port device team_slave_0 removed [ 199.095334][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.115457][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.236610][ T11] bond0 (unregistering): Released all slaves [ 199.321624][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.347598][ T7174] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.356560][ T7174] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.365310][ T7174] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.374078][ T7174] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.383418][ T7174] device vxlan0 entered promiscuous mode [ 199.532085][ T7192] kAFS: No cell specified [ 199.654793][ T7196] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.663140][ T7196] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.903660][ T7204] block device autoloading is deprecated and will be removed. [ 199.974211][ T7209] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 200.035408][ T7056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.133653][ T7056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.163703][ T7056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.203365][ T7056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.344979][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.461011][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.500871][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.518941][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.544716][ T7056] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.582520][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.592314][ T3945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.620895][ T3945] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.628031][ T3945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.638841][ T7205] loop1: detected capacity change from 0 to 32768 [ 200.670528][ T7205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7205) [ 200.679801][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.711615][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.720378][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.728257][ T7205] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.764255][ T7205] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 200.769516][ T3953] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.780202][ T3953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.798485][ T7205] BTRFS info (device loop1): use zlib compression, level 3 [ 200.811127][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.821278][ T7205] BTRFS info (device loop1): using free space tree [ 200.840251][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.885798][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.905465][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.935180][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.963017][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.987745][ T7205] BTRFS info (device loop1): enabling ssd optimizations [ 200.995008][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.021363][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.033764][ T7056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.048923][ T7056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.059050][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.067649][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.076298][ T3583] Bluetooth: hci0: command tx timeout [ 201.083167][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.087875][ T27] audit: type=1800 audit(1718585537.507:127): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 201.191451][ T27] audit: type=1800 audit(1718585537.607:128): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 201.259044][ T7241] kAFS: No cell specified [ 201.537559][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.566577][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.580897][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.681396][ T27] audit: type=1326 audit(1718585538.107:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 201.770094][ T27] audit: type=1326 audit(1718585538.127:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 201.871152][ T27] audit: type=1326 audit(1718585538.137:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f556247cc0b code=0x7ffc0000 [ 201.915934][ T6353] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.931318][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.940220][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.954490][ T27] audit: type=1326 audit(1718585538.137:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 202.031940][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.043840][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.060627][ T27] audit: type=1326 audit(1718585538.137:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 202.097517][ T7056] device veth0_vlan entered promiscuous mode [ 202.117141][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.137994][ T27] audit: type=1326 audit(1718585538.137:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 202.160759][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.170234][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.180772][ T27] audit: type=1326 audit(1718585538.147:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 202.220477][ T7056] device veth1_vlan entered promiscuous mode [ 202.267248][ T27] audit: type=1326 audit(1718585538.157:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 202.290045][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.392020][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.400179][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.441797][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.471307][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.504699][ T7056] device veth0_macvtap entered promiscuous mode [ 202.541698][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.567827][ T7056] device veth1_macvtap entered promiscuous mode [ 202.622404][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.654340][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.690871][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.720823][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.760685][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.790972][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.813538][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.860746][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.892670][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.025417][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.051655][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.063094][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.122978][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.137762][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.148505][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.158495][ T3583] Bluetooth: hci0: command tx timeout [ 203.165307][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.175908][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.185767][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.196375][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.209721][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.233375][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.246533][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.258921][ T7056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.268099][ T7056] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.277447][ T7056] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.286573][ T7056] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.514319][ T3963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.531383][ T3963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.577957][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.634822][ T3963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.698790][ T3963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.030338][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.043719][ T7348] loop4: detected capacity change from 0 to 64 [ 205.308975][ T7353] loop4: detected capacity change from 0 to 64 [ 205.509831][ T7344] loop1: detected capacity change from 0 to 32768 [ 205.545396][ T7344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7344) [ 205.588413][ T7344] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.609057][ T7344] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 205.636416][ T7344] BTRFS info (device loop1): use zlib compression, level 3 [ 205.653934][ T7344] BTRFS info (device loop1): using free space tree [ 205.734244][ T7361] loop4: detected capacity change from 0 to 256 [ 205.771608][ T7344] BTRFS info (device loop1): enabling ssd optimizations [ 206.001019][ T3790] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.058008][ T7392] Â: renamed from pim6reg1 [ 206.187822][ T6353] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.270904][ T3790] usb 4-1: Using ep0 maxpacket: 8 [ 206.403221][ T3790] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 206.418211][ T3790] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 206.440068][ T3790] usb 4-1: config 0 has no interface number 0 [ 206.453103][ T3790] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 55, changing to 9 [ 206.465710][ T27] kauditd_printk_skb: 211 callbacks suppressed [ 206.465724][ T27] audit: type=1326 audit(1718585542.897:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 206.473645][ T7409] loop0: detected capacity change from 0 to 256 [ 206.506924][ T3790] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 8496, setting to 1024 [ 206.530840][ T3790] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.546203][ T27] audit: type=1326 audit(1718585542.897:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 206.570998][ T3790] usb 4-1: config 0 interface 52 has no altsetting 0 [ 206.582968][ T27] audit: type=1326 audit(1718585542.897:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 206.606666][ T27] audit: type=1326 audit(1718585542.897:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 206.639681][ T27] audit: type=1326 audit(1718585542.897:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f266fe7cee3 code=0x7ffc0000 [ 206.644019][ T7413] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 206.679717][ T7412] loop1: detected capacity change from 0 to 1024 [ 206.686567][ T27] audit: type=1326 audit(1718585542.897:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f266fe7bbef code=0x7ffc0000 [ 206.704694][ T7412] hfsplus: type requires a 4 character value [ 206.711272][ T27] audit: type=1326 audit(1718585542.897:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f266fe7cf37 code=0x7ffc0000 [ 206.730914][ T7412] hfsplus: unable to parse mount options [ 206.743672][ T3790] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 206.753750][ T3790] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 206.762197][ T3790] usb 4-1: Product: syz [ 206.766580][ T3790] usb 4-1: SerialNumber: syz [ 206.773071][ T3790] usb 4-1: config 0 descriptor?? [ 206.778729][ T27] audit: type=1326 audit(1718585542.897:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f266fe7baa0 code=0x7ffc0000 [ 206.808736][ T27] audit: type=1326 audit(1718585542.897:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f266fe7cc0b code=0x7ffc0000 [ 206.838286][ T7417] ALSA: seq fatal error: cannot create timer (-22) [ 206.841300][ T27] audit: type=1326 audit(1718585542.927:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f266fe7bd9a code=0x7ffc0000 [ 206.900548][ T7419] loop4: detected capacity change from 0 to 256 [ 206.969600][ T7423] loop0: detected capacity change from 0 to 16 [ 207.024269][ T7423] erofs: (device loop0): mounted with root inode @ nid 36. [ 207.053464][ T7423] syz-executor.0: attempt to access beyond end of device [ 207.053464][ T7423] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 207.084447][ T7369] loop3: detected capacity change from 0 to 2048 [ 207.193415][ T7369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.508465][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.555475][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.727480][ T7427] syz-executor.0: attempt to access beyond end of device [ 207.727480][ T7427] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 207.781967][ T7434] syz-executor.0: attempt to access beyond end of device [ 207.781967][ T7434] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 207.826624][ T7423] syz-executor.0: attempt to access beyond end of device [ 207.826624][ T7423] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 207.851269][ T7423] syz-executor.0: attempt to access beyond end of device [ 207.851269][ T7423] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 208.033497][ T7421] loop1: detected capacity change from 0 to 32768 [ 208.055789][ T7421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7421) [ 208.084261][ T7421] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.103906][ T3790] usb 4-1: Can not set alternate setting to 1, error: -71 [ 208.114832][ T7421] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 208.120582][ T3790] synaptics_usb: probe of 4-1:0.52 failed with error -71 [ 208.135762][ T7421] BTRFS info (device loop1): use zlib compression, level 3 [ 208.150859][ T7421] BTRFS info (device loop1): using free space tree [ 208.160841][ T3790] usb 4-1: USB disconnect, device number 8 [ 208.202919][ T7440] loop3: detected capacity change from 0 to 64 [ 208.222855][ T7432] loop4: detected capacity change from 0 to 32768 [ 208.246267][ T7432] XFS (loop4): Mounting V5 Filesystem [ 208.251904][ T3941] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 208.324529][ T7432] XFS (loop4): Ending clean mount [ 208.365153][ T7432] XFS (loop4): Quotacheck needed: Please wait. [ 208.401266][ T7421] BTRFS info (device loop1): enabling ssd optimizations [ 208.409268][ T7469] 9pnet_fd: Insufficient options for proto=fd [ 208.419486][ T7432] XFS (loop4): Quotacheck: Done. [ 208.434815][ T7467] loop3: detected capacity change from 0 to 256 [ 208.650366][ T3941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.669527][ T3941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.699349][ T3941] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.722794][ T3941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.746912][ T3941] usb 1-1: config 0 descriptor?? [ 208.777234][ T7056] XFS (loop4): Unmounting Filesystem [ 208.826940][ T7484] loop3: detected capacity change from 0 to 256 [ 208.897662][ T7484] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 208.967519][ T6353] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.993099][ T7484] VFS: Lookup of 'file0' in exfat loop3 would have caused loop [ 209.249430][ T3941] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 209.274358][ T3941] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 209.342176][ T3941] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 209.572859][ T3613] usb 1-1: USB disconnect, device number 4 [ 209.764557][ T7513] syz-executor.4[7513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.764715][ T7513] syz-executor.4[7513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.799796][ T7513] syz-executor.4[7513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.837302][ T7513] syz-executor.4[7513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.048877][ T7505] loop1: detected capacity change from 0 to 32768 [ 210.079676][ T7505] XFS (loop1): Mounting V5 Filesystem [ 210.660927][ T7505] XFS (loop1): Ending clean mount [ 210.763977][ T7505] XFS (loop1): Quotacheck needed: Please wait. [ 210.851222][ T7505] XFS (loop1): Quotacheck: Done. [ 211.044619][ T7542] loop4: detected capacity change from 0 to 512 [ 211.052023][ T7542] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.059260][ T7542] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.121896][ T7542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 211.122035][ T7542] System zones: 1-12 [ 211.197313][ T7542] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 211.205199][ T7542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 211.209149][ T7542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 211.220540][ T7542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 211.238364][ T7542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 211.258758][ T7542] EXT4-fs (loop4): 1 orphan inode deleted [ 211.258794][ T7542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.270862][ T7547] loop0: detected capacity change from 0 to 4096 [ 211.283499][ T6353] XFS (loop1): Unmounting Filesystem [ 211.312494][ T7547] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 211.376007][ T7056] EXT4-fs (loop4): unmounting filesystem. [ 211.480598][ T7549] loop4: detected capacity change from 0 to 2048 [ 211.558074][ T7550] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.564053][ T7547] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 211.628279][ T7552] syz-executor.3[7552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.628417][ T7552] syz-executor.3[7552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.650888][ T7552] syz-executor.3[7552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.680505][ T7552] syz-executor.3[7552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.727642][ T7556] loop1: detected capacity change from 0 to 512 [ 211.771514][ T7556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.830389][ T7556] overlayfs: './file1' not a directory [ 211.884258][ T6353] EXT4-fs (loop1): unmounting filesystem. [ 212.593964][ T7585] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.234370][ T7589] loop0: detected capacity change from 0 to 7 [ 213.281211][ T7589] Dev loop0: unable to read RDB block 7 [ 213.291241][ T7589] loop0: AHDI p3 p4 [ 213.296014][ T7589] loop0: partition table partially beyond EOD, truncated [ 213.322470][ T7589] loop0: p3 start 6514546 is beyond EOD, truncated [ 213.981885][ T7625] loop0: detected capacity change from 0 to 7 [ 214.009790][ T7625] Dev loop0: unable to read RDB block 7 [ 214.015383][ T7625] loop0: AHDI p3 p4 [ 214.046388][ T7625] loop0: partition table partially beyond EOD, truncated [ 214.060049][ T7625] loop0: p3 start 6514546 is beyond EOD, truncated [ 214.250038][ T27] kauditd_printk_skb: 86 callbacks suppressed [ 214.250055][ T27] audit: type=1800 audit(1718588128.723:444): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 214.589722][ T27] audit: type=1326 audit(1718588129.056:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 214.612523][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.677067][ T27] audit: type=1326 audit(1718588129.096:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 214.755565][ T27] audit: type=1326 audit(1718588129.096:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 214.824715][ T27] audit: type=1326 audit(1718588129.096:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 214.920084][ T27] audit: type=1326 audit(1718588129.096:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 214.986663][ T27] audit: type=1326 audit(1718588129.106:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 215.028841][ T27] audit: type=1326 audit(1718588129.106:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806c7cea9 code=0x7ffc0000 [ 215.085365][ T27] audit: type=1326 audit(1718588129.106:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa806c7a627 code=0x7ffc0000 [ 215.135957][ T27] audit: type=1326 audit(1718588129.106:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa806c40309 code=0x7ffc0000 [ 215.552109][ T7658] loop3: detected capacity change from 0 to 32768 [ 215.575436][ T7658] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7658) [ 215.611676][ T7658] BTRFS info (device loop3): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 215.639724][ T7658] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 215.659750][ T7658] BTRFS info (device loop3): using free space tree [ 215.738784][ T7658] BTRFS info (device loop3): enabling ssd optimizations [ 215.753674][ T3945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 215.904070][ T5156] BTRFS info (device loop3): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 216.130513][ T3945] usb 2-1: Using ep0 maxpacket: 32 [ 217.122781][ T7723] device batadv0 entered promiscuous mode [ 217.144964][ T3945] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 217.154259][ T7722] device batadv0 left promiscuous mode [ 217.163202][ T3945] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 217.199602][ T3945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.232300][ T3945] usb 2-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 217.269846][ T3945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.300659][ T3945] usb 2-1: config 0 descriptor?? [ 217.329429][ T7727] loop0: detected capacity change from 0 to 128 [ 217.361794][ T3945] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 217.393700][ T7727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 217.420977][ T7727] ext4 filesystem being mounted at /root/syzkaller-testdir2389564993/syzkaller.SnK9ml/168/mnt supports timestamps until 2038 (0x7fffffff) [ 217.519955][ T7727] EXT4-fs (loop0): unmounting filesystem. [ 217.598094][ T3944] usb 2-1: USB disconnect, device number 4 [ 217.695693][ T7752] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.911612][ T7764] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.203988][ T7772] loop1: detected capacity change from 0 to 128 [ 218.255221][ T7772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 218.271115][ T7772] ext4 filesystem being mounted at /root/syzkaller-testdir3186385316/syzkaller.NtwM0k/52/mnt supports timestamps until 2038 (0x7fffffff) [ 218.369424][ T7769] loop3: detected capacity change from 0 to 8192 [ 218.400181][ T7772] EXT4-fs (loop1): unmounting filesystem. [ 218.474383][ T7769] loop3: p1 < > p2 p4 < p5 > [ 218.479117][ T7769] loop3: partition table partially beyond EOD, truncated [ 218.526326][ T7769] loop3: p1 start 8388864 is beyond EOD, truncated [ 218.559327][ T7769] loop3: p2 size 31064064 extends beyond EOD, truncated [ 218.562509][ T7784] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.591005][ T7769] loop3: p5 size 31064064 extends beyond EOD, truncated [ 219.220872][ T7801] loop4: detected capacity change from 0 to 4096 [ 219.376995][ T7809] loop3: detected capacity change from 0 to 128 [ 219.398309][ T7809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.410106][ T3944] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 219.415082][ T7809] ext4 filesystem being mounted at /root/syzkaller-testdir722967150/syzkaller.djhov4/152/mnt supports timestamps until 2038 (0x7fffffff) [ 219.513739][ T7809] EXT4-fs (loop3): unmounting filesystem. [ 219.638676][ T7785] loop0: detected capacity change from 0 to 32768 [ 219.659888][ T3944] usb 2-1: Using ep0 maxpacket: 32 [ 219.665388][ T7785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7785) [ 219.694885][ T7785] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.721229][ T7785] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 219.739565][ T7785] BTRFS info (device loop0): using free space tree [ 219.868207][ T3944] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 219.878045][ T3944] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 219.889590][ T3944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.903385][ T3944] usb 2-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 219.912736][ T3944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.959234][ T3944] usb 2-1: config 0 descriptor?? [ 219.981528][ T7828] loop3: detected capacity change from 0 to 8192 [ 219.989641][ T7785] BTRFS info (device loop0): enabling ssd optimizations [ 220.032558][ T3944] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 220.053157][ T7828] loop3: p1 < > p2 p4 < p5 > [ 220.057920][ T7828] loop3: partition table partially beyond EOD, truncated [ 220.075432][ T7828] loop3: p1 start 8388864 is beyond EOD, truncated [ 220.089695][ T7828] loop3: p2 size 31064064 extends beyond EOD, truncated [ 220.120514][ T7828] loop3: p5 size 31064064 extends beyond EOD, truncated [ 220.281072][ T3944] usb 2-1: USB disconnect, device number 5 [ 220.343991][ T4123] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 220.380032][ T27] kauditd_printk_skb: 197 callbacks suppressed [ 220.380048][ T27] audit: type=1804 audit(1718588134.871:651): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2389564993/syzkaller.SnK9ml/174/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 220.478129][ T27] audit: type=1800 audit(1718588134.971:652): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 220.582453][ T27] audit: type=1804 audit(1718588135.081:653): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2389564993/syzkaller.SnK9ml/174/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 220.926156][ T7854] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.069395][ T7859] device batadv0 entered promiscuous mode [ 221.090740][ T7858] device batadv0 left promiscuous mode [ 221.235283][ T27] audit: type=1800 audit(1718588135.731:654): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 221.265831][ T7866] loop1: detected capacity change from 0 to 512 [ 221.322229][ T7866] FAT-fs (loop1): bogus sectors per cluster 69 [ 221.328622][ T7866] FAT-fs (loop1): Can't find a valid FAT filesystem [ 222.340140][ T4924] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.052057][ T7921] loop1: detected capacity change from 0 to 256 [ 223.262505][ T7926] loop1: detected capacity change from 0 to 64 [ 223.640626][ T7904] loop4: detected capacity change from 0 to 32768 [ 223.902687][ T7904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7904) [ 224.423655][ T7904] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.447287][ T7904] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 224.461300][ T7956] loop0: detected capacity change from 0 to 256 [ 224.485652][ T7904] BTRFS info (device loop4): using free space tree [ 224.492375][ T7956] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.503562][ T7956] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 224.526875][ T7956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 224.643616][ T7977] loop3: detected capacity change from 0 to 64 [ 224.655555][ T7904] BTRFS info (device loop4): enabling ssd optimizations [ 224.829567][ T3969] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 224.891218][ T27] audit: type=1804 audit(1718588139.393:655): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir928800912/syzkaller.tUMxJv/43/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 225.007551][ T27] audit: type=1804 audit(1718588139.513:656): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir928800912/syzkaller.tUMxJv/43/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 225.049488][ T7983] loop0: detected capacity change from 0 to 4096 [ 225.067785][ T7983] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 225.270866][ T7983] ntfs3: loop0: ino=1f, "bus" ntfs_iget5 [ 225.380987][ T4924] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 225.427199][ T4924] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 225.447685][ T4924] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 225.744063][ T7056] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.561066][ T8004] loop1: detected capacity change from 0 to 32768 [ 226.618926][ T8004] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8004) [ 226.658365][ T8004] BTRFS info (device loop1): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 226.689683][ T8004] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 226.706490][ T8011] loop0: detected capacity change from 0 to 4096 [ 226.716404][ T8004] BTRFS info (device loop1): using free space tree [ 226.783763][ T8011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.853705][ T4924] EXT4-fs (loop0): unmounting filesystem. [ 226.976248][ T8004] BTRFS info (device loop1): enabling ssd optimizations [ 227.113271][ T6353] BTRFS info (device loop1): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 227.526417][ T8050] loop3: detected capacity change from 0 to 4096 [ 227.555324][ T8050] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 227.683206][ T8050] ntfs3: loop3: ino=1f, "bus" ntfs_iget5 [ 227.768859][ T5156] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 227.787623][ T5156] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 227.794158][ T5156] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 227.908961][ T27] audit: type=1804 audit(1718588142.414:657): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=1941 res=1 errno=0 [ 229.071197][ T8093] loop3: detected capacity change from 0 to 16 [ 229.089575][ T8093] erofs: (device loop3): mounted with root inode @ nid 36. [ 229.116292][ T8093] syz-executor.3: attempt to access beyond end of device [ 229.116292][ T8093] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 229.415411][ T3778] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.639622][ T8097] loop1: detected capacity change from 0 to 256 [ 229.648914][ T8097] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.659785][ T8097] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 229.675457][ T8097] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 229.804871][ T3778] usb 1-1: Using ep0 maxpacket: 8 [ 229.815797][ T8100] syz-executor.3: attempt to access beyond end of device [ 229.815797][ T8100] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 229.869199][ T8093] syz-executor.3: attempt to access beyond end of device [ 229.869199][ T8093] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 229.944926][ T3778] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 229.953998][ T3778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.968560][ T8093] syz-executor.3: attempt to access beyond end of device [ 229.968560][ T8093] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 230.022950][ T8093] syz-executor.3: attempt to access beyond end of device [ 230.022950][ T8093] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 230.037934][ T27] audit: type=1326 audit(1718588144.545:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.094295][ T27] audit: type=1326 audit(1718588144.545:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.096118][ T3778] usb 1-1: config 0 descriptor?? [ 230.137873][ T27] audit: type=1326 audit(1718588144.566:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.191628][ T27] audit: type=1326 audit(1718588144.566:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.203633][ T8099] loop4: detected capacity change from 0 to 32768 [ 230.222814][ T8099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8099) [ 230.237913][ T27] audit: type=1326 audit(1718588144.566:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.263886][ T8099] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.290429][ T8099] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 230.291594][ T27] audit: type=1326 audit(1718588144.566:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.300028][ T8099] BTRFS info (device loop4): using free space tree [ 230.334084][ T27] audit: type=1326 audit(1718588144.566:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556247cea9 code=0x7ffc0000 [ 230.369639][ T27] audit: type=1326 audit(1718588144.566:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f556247a627 code=0x7ffc0000 [ 230.395985][ T27] audit: type=1326 audit(1718588144.566:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5562440309 code=0x7ffc0000 [ 230.447471][ T3778] viperboard 1-1:0.0: version 0.00 found at bus 001 address 005 [ 230.508216][ T3778] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 230.529668][ T3778] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 230.572000][ T8099] BTRFS info (device loop4): enabling ssd optimizations [ 230.579374][ T3778] usb 1-1: USB disconnect, device number 5 [ 230.672668][ T8128] loop3: detected capacity change from 0 to 8192 [ 230.727191][ T7056] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.519701][ T8192] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 125 (only 8 groups) [ 233.593016][ T3613] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.622309][ T8145] loop1: detected capacity change from 0 to 32768 [ 233.802487][ T8198] loop4: detected capacity change from 0 to 8192 [ 233.809022][ T8203] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 233.838973][ T8145] find_entry called with index = 0 [ 233.847280][ T8145] read_mapping_page failed! [ 233.873455][ T8145] ERROR: (device loop1): txCommit: [ 233.873455][ T8145] [ 233.972995][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.996639][ T3613] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.016107][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.037973][ T3613] usb 4-1: config 0 descriptor?? [ 234.091705][ T6353] ERROR: (device loop1): diFree: numfree > numinos [ 234.091705][ T6353] [ 234.543838][ T3613] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 234.565844][ T3613] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input12 [ 234.580440][ T8210] loop4: detected capacity change from 0 to 32768 [ 234.600876][ T8210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8210) [ 234.643871][ T8210] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.655093][ T8210] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 234.664074][ T8210] BTRFS info (device loop4): using free space tree [ 234.702925][ T3613] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 234.812706][ T8210] BTRFS info (device loop4): enabling ssd optimizations [ 234.893303][ T8244] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 125 (only 8 groups) [ 234.990068][ T3663] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 235.013215][ T27] kauditd_printk_skb: 107 callbacks suppressed [ 235.013230][ T27] audit: type=1326 audit(1718588149.518:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.083151][ T27] audit: type=1326 audit(1718588149.518:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.131877][ T27] audit: type=1326 audit(1718588149.548:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.164865][ T27] audit: type=1326 audit(1718588149.548:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.222191][ T27] audit: type=1326 audit(1718588149.548:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.257752][ T27] audit: type=1326 audit(1718588149.548:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.299372][ T27] audit: type=1326 audit(1718588149.548:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.342274][ T14] usb 4-1: USB disconnect, device number 9 [ 235.375454][ T27] audit: type=1326 audit(1718588149.548:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.404111][ T27] audit: type=1326 audit(1718588149.548:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 235.428172][ T27] audit: type=1326 audit(1718588149.548:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266fe7cea9 code=0x7ffc0000 [ 237.084929][ T7056] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.173418][ T8324] loop3: detected capacity change from 0 to 256 [ 240.602354][ T8325] loop0: detected capacity change from 0 to 32768 [ 240.621436][ T8325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8325) [ 240.637289][ T8325] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.655806][ T8325] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 240.668438][ T8325] BTRFS info (device loop0): use zlib compression, level 3 [ 240.685077][ T8325] BTRFS info (device loop0): using free space tree [ 240.779298][ T8357] loop4: detected capacity change from 0 to 2048 [ 240.860251][ T8357] loop4: p1 < > p4 [ 240.865110][ T8357] loop4: p4 size 8388608 extends beyond EOD, truncated [ 241.682417][ T8385] loop3: detected capacity change from 0 to 16 [ 241.702474][ T8325] BTRFS info (device loop0): enabling ssd optimizations [ 241.731414][ T8385] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 241.812379][ T27] kauditd_printk_skb: 120 callbacks suppressed [ 241.812395][ T27] audit: type=1800 audit(1718588156.321:904): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=263 res=0 errno=0 [ 241.935234][ T4924] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.299069][ T8411] loop4: detected capacity change from 0 to 1024 [ 244.516686][ T8438] loop4: detected capacity change from 0 to 16 [ 244.533157][ T8438] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 244.573000][ T27] audit: type=1800 audit(1718588159.083:905): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 244.594151][ T8444] loop3: detected capacity change from 0 to 512 [ 244.606982][ T8444] EXT4-fs (loop3): orphan cleanup on readonly fs [ 244.614236][ T8444] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 244.633912][ T8444] EXT4-fs error (device loop3): ext4_quota_enable:6971: comm syz-executor.3: Bad quota inode: 4, type: 1 [ 244.652159][ T8444] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.667123][ T8444] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 244.674026][ T8444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.691031][ T8444] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 244.778366][ T8444] EXT4-fs warning (device loop3): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 244.778366][ T8444] [ 244.813057][ T8454] loop4: detected capacity change from 0 to 1024 [ 244.858572][ T5156] EXT4-fs (loop3): unmounting filesystem. [ 245.040720][ T8471] loop4: detected capacity change from 0 to 256 [ 245.078300][ T8461] loop3: detected capacity change from 0 to 8192 [ 245.098612][ T27] audit: type=1800 audit(1718588159.613:906): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1967 res=0 errno=0 [ 245.160321][ T8461] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.182147][ T27] audit: type=1800 audit(1718588159.693:907): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048637 res=0 errno=0 [ 245.256554][ T8476] syz-executor.0 (pid 8476) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 245.273976][ T8476] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 245.355185][ T8479] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 246.213518][ T8493] [ 246.215881][ T8493] ============================================ [ 246.222035][ T8493] WARNING: possible recursive locking detected [ 246.228187][ T8493] 6.1.94-syzkaller #0 Not tainted [ 246.233214][ T8493] -------------------------------------------- [ 246.239367][ T8493] syz-executor.3/8493 is trying to acquire lock: [ 246.245696][ T8493] ffff888077bd5458 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c0/0x5e0 [ 246.254796][ T8493] [ 246.254796][ T8493] but task is already holding lock: [ 246.262184][ T8493] ffff8880786fa8d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c0/0x5e0 [ 246.271358][ T8493] [ 246.271358][ T8493] other info that might help us debug this: [ 246.279402][ T8493] Possible unsafe locking scenario: [ 246.279402][ T8493] [ 246.286837][ T8493] CPU0 [ 246.290103][ T8493] ---- [ 246.293365][ T8493] lock(_xmit_ETHER#2); [ 246.297602][ T8493] lock(_xmit_ETHER#2); [ 246.301838][ T8493] [ 246.301838][ T8493] *** DEADLOCK *** [ 246.301838][ T8493] [ 246.309963][ T8493] May be due to missing lock nesting notation [ 246.309963][ T8493] [ 246.318261][ T8493] 12 locks held by syz-executor.3/8493: [ 246.323798][ T8493] #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0xa8b/0x1850 [ 246.333652][ T8493] #1: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x698/0x1530 [ 246.343479][ T8493] #2: ffffffff8d12ad20 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d6/0x3cf0 [ 246.353392][ T8493] #3: ffff888079bbb258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x131b/0x3cf0 [ 246.365981][ T8493] #4: ffff8880786fa8d8 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x1c0/0x5e0 [ 246.375478][ T8493] #5: ffff8880280107f0 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc10/0x2160 [ 246.384881][ T8493] #6: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xb70/0x2160 [ 246.394011][ T8493] #7: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x698/0x1530 [ 246.403834][ T8493] #8: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x5a8/0x14e0 [ 246.413304][ T8493] #9: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x698/0x1530 [ 246.423128][ T8493] #10: ffffffff8d12ad20 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d6/0x3cf0 [ 246.433125][ T8493] #11: ffff888072c85258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x131b/0x3cf0 [ 246.445644][ T8493] [ 246.445644][ T8493] stack backtrace: [ 246.451524][ T8493] CPU: 1 PID: 8493 Comm: syz-executor.3 Not tainted 6.1.94-syzkaller #0 [ 246.459836][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 246.469885][ T8493] Call Trace: [ 246.473151][ T8493] [ 246.476067][ T8493] dump_stack_lvl+0x1e3/0x2cb [ 246.480742][ T8493] ? nf_tcp_handle_invalid+0x642/0x642 [ 246.486194][ T8493] ? panic+0x764/0x764 [ 246.490254][ T8493] validate_chain+0x4711/0x5950 [ 246.495103][ T8493] ? mark_lock+0x9a/0x340 [ 246.499427][ T8493] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 246.505398][ T8493] ? reacquire_held_locks+0x660/0x660 [ 246.510764][ T8493] ? do_raw_spin_unlock+0x137/0x8a0 [ 246.515948][ T8493] ? lockdep_hardirqs_on+0x94/0x130 [ 246.521135][ T8493] ? reacquire_held_locks+0x660/0x660 [ 246.526499][ T8493] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 246.532380][ T8493] ? stack_trace_save+0x113/0x1c0 [ 246.537395][ T8493] ? stack_trace_snprint+0xe0/0xe0 [ 246.542495][ T8493] ? reacquire_held_locks+0x660/0x660 [ 246.547858][ T8493] ? __stack_depot_save+0x3f5/0x470 [ 246.553044][ T8493] ? mark_lock+0x9a/0x340 [ 246.557368][ T8493] __lock_acquire+0x125b/0x1f80 [ 246.562215][ T8493] lock_acquire+0x1f8/0x5a0 [ 246.566710][ T8493] ? sch_direct_xmit+0x1c0/0x5e0 [ 246.571639][ T8493] ? read_lock_is_recursive+0x10/0x10 [ 246.577005][ T8493] ? validate_xmit_skb_list+0x130/0x130 [ 246.582543][ T8493] _raw_spin_lock+0x2a/0x40 [ 246.587034][ T8493] ? sch_direct_xmit+0x1c0/0x5e0 [ 246.591968][ T8493] sch_direct_xmit+0x1c0/0x5e0 [ 246.596729][ T8493] ? mrp_pdu_append_vecattr_event+0x1630/0x1630 [ 246.602960][ T8493] ? ieee80211_stop+0x480/0x480 [ 246.607803][ T8493] __dev_queue_xmit+0x1ace/0x3cf0 [ 246.612819][ T8493] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 246.617918][ T8493] ? netdev_core_pick_tx+0x320/0x320 [ 246.623277][ T8493] ? neigh_event_send+0x120/0x120 [ 246.628289][ T8493] ? neigh_resolve_output+0x2de/0x730 [ 246.633649][ T8493] ? _local_bh_enable+0xa0/0xa0 [ 246.638491][ T8493] ? eth_header+0x118/0x1e0 [ 246.642982][ T8493] ? memcpy+0x3c/0x60 [ 246.647051][ T8493] ? eth_header+0x118/0x1e0 [ 246.651543][ T8493] ? llc_sysctl_exit+0x60/0x60 [ 246.656290][ T8493] ? neigh_resolve_output+0x610/0x730 [ 246.661653][ T8493] ip6_finish_output2+0xee1/0x1530 [ 246.666760][ T8493] ? __lock_acquire+0x1f80/0x1f80 [ 246.671775][ T8493] ? ip6_finish_output2+0x698/0x1530 [ 246.677049][ T8493] ? nf_hook+0x450/0x450 [ 246.681287][ T8493] ? ip6_mtu+0x7d/0x3e0 [ 246.685437][ T8493] ip6_finish_output+0x6a0/0xa80 [ 246.690367][ T8493] ndisc_send_skb+0xbab/0x14e0 [ 246.695206][ T8493] ? ndisc_send_skb+0x5a8/0x14e0 [ 246.700136][ T8493] ? ndisc_mc_map+0x7d0/0x7d0 [ 246.704800][ T8493] ? skb_dst+0xd0/0xd0 [ 246.708854][ T8493] ? memcpy+0x3c/0x60 [ 246.712824][ T8493] ? ndisc_alloc_skb+0x2c0/0x2c0 [ 246.717748][ T8493] ? ipv6_get_lladdr+0x356/0x3c0 [ 246.722677][ T8493] ? ipv6_get_lladdr+0x28/0x3c0 [ 246.727524][ T8493] ndisc_solicit+0x48a/0x690 [ 246.732100][ T8493] ? __neigh_event_send+0xee1/0x1610 [ 246.737375][ T8493] ? ndisc_cleanup+0x30/0x30 [ 246.741956][ T8493] ? ndisc_cleanup+0x30/0x30 [ 246.746532][ T8493] __neigh_event_send+0xf30/0x1610 [ 246.751636][ T8493] neigh_resolve_output+0x1b4/0x730 [ 246.756829][ T8493] ip6_finish_output2+0xee1/0x1530 [ 246.761936][ T8493] ? __lock_acquire+0x1f80/0x1f80 [ 246.766954][ T8493] ? ip6_finish_output2+0x698/0x1530 [ 246.772230][ T8493] ? nf_hook+0x450/0x450 [ 246.776466][ T8493] ? ip6_mtu+0x7d/0x3e0 [ 246.780616][ T8493] ip6_finish_output+0x6a0/0xa80 [ 246.785547][ T8493] ip6_send_skb+0x12b/0x240 [ 246.790041][ T8493] ? icmp6_send+0xb70/0x2160 [ 246.794628][ T8493] icmp6_send+0x166f/0x2160 [ 246.799123][ T8493] ? icmp6_send+0xb70/0x2160 [ 246.803709][ T8493] ? icmpv6_push_pending_frames+0x4a0/0x4a0 [ 246.809686][ T8493] ? ip6_neigh_lookup+0x138/0x580 [ 246.814699][ T8493] ? __lock_acquire+0x1f80/0x1f80 [ 246.819720][ T8493] ? ip6_neigh_lookup+0x447/0x580 [ 246.824731][ T8493] ? rt6_uncached_list_del+0x180/0x180 [ 246.830180][ T8493] ip6_link_failure+0x38/0x4e0 [ 246.834934][ T8493] ? ip6_negative_advice+0x3f0/0x3f0 [ 246.840212][ T8493] ip_tunnel_xmit+0x1905/0x2cc0 [ 246.845055][ T8493] ? reacquire_held_locks+0x660/0x660 [ 246.850423][ T8493] ? mark_lock+0x9a/0x340 [ 246.854747][ T8493] ? tnl_update_pmtu+0x10b0/0x10b0 [ 246.859852][ T8493] ? __lock_acquire+0x125b/0x1f80 [ 246.864881][ T8493] ? gre_build_header+0x25b/0x9a0 [ 246.869908][ T8493] erspan_xmit+0xaf4/0x1590 [ 246.874400][ T8493] ? read_lock_is_recursive+0x10/0x10 [ 246.879772][ T8493] dev_hard_start_xmit+0x261/0x8c0 [ 246.884897][ T8493] sch_direct_xmit+0x2b2/0x5e0 [ 246.889671][ T8493] ? mrp_pdu_append_vecattr_event+0x1630/0x1630 [ 246.895909][ T8493] __dev_queue_xmit+0x1ace/0x3cf0 [ 246.900934][ T8493] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 246.906047][ T8493] ? netdev_core_pick_tx+0x320/0x320 [ 246.911330][ T8493] ? neigh_event_send+0x120/0x120 [ 246.916347][ T8493] ? neigh_resolve_output+0x2de/0x730 [ 246.921711][ T8493] ? _local_bh_enable+0xa0/0xa0 [ 246.926554][ T8493] ? eth_header+0x118/0x1e0 [ 246.931047][ T8493] ? memcpy+0x3c/0x60 [ 246.935022][ T8493] ? eth_header+0x118/0x1e0 [ 246.939515][ T8493] ? llc_sysctl_exit+0x60/0x60 [ 246.944270][ T8493] ? neigh_resolve_output+0x610/0x730 [ 246.949639][ T8493] ip6_finish_output2+0xee1/0x1530 [ 246.954747][ T8493] ? __lock_acquire+0x1f80/0x1f80 [ 246.959765][ T8493] ? ip6_finish_output2+0x698/0x1530 [ 246.965041][ T8493] ? nf_hook+0x450/0x450 [ 246.969288][ T8493] ? ip6_mtu+0x7d/0x3e0 [ 246.973445][ T8493] ip6_finish_output+0x6a0/0xa80 [ 246.978380][ T8493] ? rawv6_send_hdrinc+0xa8b/0x1850 [ 246.983587][ T8493] rawv6_send_hdrinc+0xd15/0x1850 [ 246.988610][ T8493] ? rawv6_probe_proto_opt+0x300/0x300 [ 246.994067][ T8493] ? ip6_dst_lookup_flow+0x13a/0x170 [ 246.999348][ T8493] ? rawv6_push_pending_frames+0xa00/0xa00 [ 247.005150][ T8493] ? ip6_dst_lookup_tail+0x11f0/0x11f0 [ 247.010606][ T8493] ? rawv6_sendmsg+0xe19/0x2150 [ 247.015455][ T8493] rawv6_sendmsg+0x1648/0x2150 [ 247.020223][ T8493] ? compat_rawv6_ioctl+0x60/0x60 [ 247.025247][ T8493] ? aa_sk_perm+0x92d/0xa60 [ 247.029741][ T8493] ? aa_af_perm+0x350/0x350 [ 247.034232][ T8493] ? sock_rps_record_flow+0x1a/0x3f0 [ 247.039512][ T8493] ? inet_sendmsg+0x81/0x310 [ 247.044097][ T8493] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.049388][ T8493] ? security_socket_sendmsg+0x7d/0xa0 [ 247.054847][ T8493] ? inet_send_prepare+0x250/0x250 [ 247.060305][ T8493] ____sys_sendmsg+0x5a5/0x8f0 [ 247.065065][ T8493] ? __sys_sendmsg_sock+0x30/0x30 [ 247.070083][ T8493] __sys_sendmmsg+0x3ab/0x730 [ 247.074751][ T8493] ? __ia32_sys_sendmsg+0x90/0x90 [ 247.079788][ T8493] ? __might_fault+0xa1/0x110 [ 247.084462][ T8493] ? __lock_acquire+0x1f80/0x1f80 [ 247.089481][ T8493] ? __might_fault+0xa1/0x110 [ 247.094156][ T8493] ? print_irqtrace_events+0x210/0x210 [ 247.099609][ T8493] ? syscall_enter_from_user_mode+0x2e/0x230 [ 247.105630][ T8493] __x64_sys_sendmmsg+0x9c/0xb0 [ 247.110499][ T8493] do_syscall_64+0x3b/0xb0 [ 247.114919][ T8493] ? clear_bhb_loop+0x45/0xa0 [ 247.119598][ T8493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.125493][ T8493] RIP: 0033:0x7f556247cea9 [ 247.129906][ T8493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 247.149500][ T8493] RSP: 002b:00007f55631e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.157918][ T8493] RAX: ffffffffffffffda RBX: 00007f55625b3f80 RCX: 00007f556247cea9 2024/06/17 01:36:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 247.165893][ T8493] RDX: 0000000000000002 RSI: 0000000020001e80 RDI: 0000000000000003 [ 247.173857][ T8493] RBP: 00007f55624ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 247.181814][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.189859][ T8493] R13: 000000000000000b R14: 00007f55625b3f80 R15: 00007fff908eb008 [ 247.197826][ T8493]