last executing test programs: 20.292809802s ago: executing program 0 (id=1750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e21, @broadcast}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x2000}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2292, &(0x7f0000000640)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x100000, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9b2", 0x2}], 0x1, 0x7fff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x3fffffff404}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100001) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x0, &(0x7f0000001340)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.12714085s ago: executing program 1 (id=1824): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200014, &(0x7f00000009c0)=ANY=[@ANYBLOB="00043b09170ca77bde7929733bbeb1ad6f4cb6652ee1635fc6609d08"], 0x1, 0x5fb, &(0x7f0000000000)="$eJzs3U9vHGcdB/DvbOKNbaRkkyZtg5CwilShRiT+k4KRkIBSwEIVqsSlUtWDRezGyjqtbBc5OSCDeAW8giJkDhUHDpwQSDlw5szNqEckTrn4ZjSzs96N42ydxPWu289Hmn2eZ5+ZZ37zy8yTmbEsB/jSWngnY1spsnDtrc2yvbM9197Znlvt1pOcS9JIxpMU5dd/TfJpspXOkqvdjr7yMe9NNh9+8u7V5U5rvF6q9YtB2x3NfiytTqxVeVzjzT73eL0jnEpyqS5h6Pa6/nNo93NelwDAKCuSM4d930om65v18jmgc1fcucc+1baGHQAAAACcgAu72c1mzg87DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhN6r//X9RLo1ufStH9+//N+rvU9VPtwbADAAAAAAAAAIBj8PXd7GYz57vtvaL6mf8rVeNy9fmVfJT1LGUt17OZxWxkI2uZSdLqG6i5ubixsTZzhC1nD91y9mSOFwAAAAAAAAC+oH6bhd7P/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBQUyZleNZfrsmilcTbJeJJm2bmV/L1bP80eDDsAAAAAOAEXdrObzZyvm3tF55n/xeq5fzwf5W42spKNtLOUW9W7gM5Tf2Nne669sz23Wi6Pj/vD/z1VGNWI6b57OGzP09UaV/bXXshP8otcy1TezlpW8qssZiNLmcqbVW0xRVr124tWN87D4/3BI623PyvWl6tIJrKclSq26/llPkg7t9KojqFaZ/Aef1Nmp/h+7Yg5ulWX5RH9rC5HQ6vKyNh+Rqbr3JfZuDg4E095nhzc00wa+++gLn8OOZ+syzLXb550zrcGdR7MxGzf2ffi4Ewkr/7x9w9vt+/eub28fm10TqNndDATc32ZeOlLlYlmnY3OLNqdLXOk2fKVatvzWcnZaq5ZyrdzM/OZzeu5mZl8N6/35fXKEa61xtNda9/4Zl0ZS/LjuhwNZV4v9uW1f6ZrVX393/SydOn4Z6SzX60r5cn6xsj9L3DxwNzczcQLgzPxh73yc719987a7cUPj7i/V+uyzMCPRioT5flyqfzHqlqPnh1l3wuH9s1UfZf3+xqP9V3Z7+tcqT/PB0+4Upv1PdzBkYrMVn0vHbqXuarv5brvwRPucgAYeZOvTTYn/jvxr4mPJ343cXvirfE3zs2f+1ozY/88+7czf2n8qfG94rV8nF/vP/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPYf3e/TuL7fbSmorKI5W9C8kIhHFKKz/9959XRyCMe/fvFFvJs2w+7JkJ+Lzd2Fj98Mb6vfvfWlldfH/p/aW7N+e/cy43Z+bnbyyvtJemO5/DjhIAOE69m/5hRwIAAAAAAAAAAAAAADzJSfwS8rCPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GJbeCdjWykyM319umzvbM+1y6Vb7605nqQoK/9I8mmylc6SVt9wxZP2895k8+En715d7o013l2/GLRdZW9w94FYGgdiegaPjDf73OP1jnAqyaW6hKH7fwAAAP//zp0C6g==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='siox_set_data\x00', r1}, 0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x49, 0x0, 0x5}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000080)="e3", 0x1}], 0x1}, 0x24048401) r6 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x38}, 0x20040001) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3f}}]}, 0xfc, 0x564, &(0x7f00000003c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) execve(0x0, &(0x7f0000000100), 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x4}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.678097423s ago: executing program 4 (id=1836): r0 = syz_usb_connect(0x0, 0x24, &(0x7f000001f980)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.436228926s ago: executing program 0 (id=1751): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=bind:1']) 3.37443585s ago: executing program 2 (id=1840): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x0, 0x0, 0x0, 0xfd]}}}}]}, 0x88}}, 0x0) 3.244728751s ago: executing program 0 (id=1841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 3.202312225s ago: executing program 2 (id=1843): socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) r3 = dup2(r2, r1) mq_notify(r3, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) 3.115037412s ago: executing program 0 (id=1844): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000540)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}) 3.027558989s ago: executing program 2 (id=1845): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) close_range(r0, 0xffffffffffffffff, 0x0) 2.976856834s ago: executing program 0 (id=1846): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@nointegrity}, {@nointegrity}, {@gid}, {@uid}, {@grpquota}, {@uid}]}, 0x1, 0x5f27, &(0x7f0000005e40)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) 2.815650807s ago: executing program 2 (id=1849): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="05005303010000001400040070696d367265670000000000000000000800050002"], 0x40}}, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000440)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40087602, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r9, 0xc034564b, &(0x7f0000000080)={0x800000, 0x35315258, 0xf00, 0x870, 0x0, @stepwise}) write$nci(r8, 0x0, 0x6) fcntl$setlease(r8, 0x400, 0x1) 2.729355704s ago: executing program 1 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000000901010000f80000000000000000001000048008000140000000000c00027a050001000000000014000280080001000000000008000200ac141400080005"], 0x58}}, 0x0) 2.327800437s ago: executing program 2 (id=1853): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x0, 0x0, 0x0, 0xfd]}}}}]}, 0x88}}, 0x0) 2.225446405s ago: executing program 4 (id=1854): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x100) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 2.129733083s ago: executing program 2 (id=1856): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x4000086e, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000080)='./bus\x00', r6, &(0x7f0000001240)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef0101"], 0x0) getpid() 2.119722965s ago: executing program 1 (id=1857): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x202, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) ftruncate(r0, 0x10000) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 2.029773322s ago: executing program 3 (id=1858): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 1.993239015s ago: executing program 4 (id=1859): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) unshare(0x400) r4 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_vhci(0x0, 0xf) syz_open_dev$dri(0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x4c}, 0x1c) 1.260552116s ago: executing program 1 (id=1860): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) close_range(r0, 0xffffffffffffffff, 0x0) 1.214372529s ago: executing program 3 (id=1861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) futex(0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) connect$llc(r1, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000), 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000040)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0xffffffc0, 0x0, 0xffff, 0x0, 0x7fff, 0x40}}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 489.636019ms ago: executing program 0 (id=1862): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000800), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000040), &(0x7f0000000140)=@tcp6, 0x1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x4040000, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[], 0x78) sendfile(r0, r5, &(0x7f0000000000), 0x4) 466.808291ms ago: executing program 3 (id=1863): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) write$sequencer(r0, &(0x7f0000000000)=[@t={0x81, 0x8, 0x0, 0x0, @generic}], 0x8) 399.457467ms ago: executing program 1 (id=1864): creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES64], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 369.716919ms ago: executing program 4 (id=1865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0xc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 297.716335ms ago: executing program 1 (id=1866): r0 = syz_usb_connect(0x0, 0x24, &(0x7f000001f980)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 262.192868ms ago: executing program 3 (id=1867): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=bind:1']) 181.623595ms ago: executing program 4 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000000901010000f80000000000000000001000048008000140000000000c00027a050001000000000014000280080001000000000008000200ac141400080005"], 0x58}}, 0x0) 152.387987ms ago: executing program 3 (id=1869): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000000)=0x100) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 26.584198ms ago: executing program 3 (id=1870): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 0s ago: executing program 4 (id=1871): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) kernel console output (not intermixed with test programs): only. Run ntfsfix and/or chkdsk. [ 408.307573][T15672] ntfs: volume version 3.1. [ 408.460481][ T3560] Bluetooth: hci6: command tx timeout [ 408.500614][T15745] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.677784][T15354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.737840][T15751] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.745055][T15751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.820342][T15763] loop4: detected capacity change from 0 to 1024 [ 408.862169][T15763] EXT4-fs: Ignoring removed i_version option [ 408.883323][T15354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.896831][T15763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 408.934338][T15763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 409.195206][T15354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.218115][T12616] EXT4-fs (loop4): unmounting filesystem. [ 410.158488][T15354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.359667][T15793] fuse: Bad value for 'group_id' [ 410.376446][T15784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'. [ 410.531578][ T3560] Bluetooth: hci6: command tx timeout [ 410.655217][ T3560] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 410.725488][T15807] loop0: detected capacity change from 0 to 7 [ 410.753789][ T3560] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 410.767880][T15807] Dev loop0: unable to read RDB block 7 [ 410.809290][T15807] loop0: AHDI p1 p4 [ 410.830020][T15807] loop0: partition table partially beyond EOD, truncated [ 410.833474][T15354] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.899700][T15354] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.956293][T15354] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.994633][T15354] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.181483][T15354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.190633][T15824] loop0: detected capacity change from 0 to 4096 [ 411.230846][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.238668][T15824] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 411.254859][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.269070][T15824] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 411.276103][T15354] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.324376][T15824] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 411.328994][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.376573][T15824] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 411.376912][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.441079][T15824] ntfs: volume version 3.1. [ 411.452485][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.459617][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.546878][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.558925][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.599334][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.639789][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.646996][ T9572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.449761][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.458996][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.587490][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.606373][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.611441][ T3560] Bluetooth: hci6: command tx timeout [ 412.693946][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.730922][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.781629][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.790253][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.811021][T15852] loop0: detected capacity change from 0 to 512 [ 412.833927][T15354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.851431][T15852] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 412.909246][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 412.929469][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.952745][T15852] EXT4-fs (loop0): 1 truncate cleaned up [ 412.958447][T15852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 412.962117][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.990074][T15860] loop4: detected capacity change from 0 to 1024 [ 413.016059][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.060715][T15860] EXT4-fs: Ignoring removed i_version option [ 413.081747][T15852] syz.0.1424 (pid 15852) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 413.108019][T15860] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 413.198695][T15860] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.367149][T14668] EXT4-fs (loop0): unmounting filesystem. [ 413.489835][T12616] EXT4-fs (loop4): unmounting filesystem. [ 413.636031][T15882] loop0: detected capacity change from 0 to 7 [ 413.665520][T15882] Dev loop0: unable to read RDB block 7 [ 413.671144][T15882] loop0: AHDI p1 p4 [ 413.690050][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.698068][T15882] loop0: partition table partially beyond EOD, truncated [ 413.699231][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.785959][T15354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.855547][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.876532][T15887] loop0: detected capacity change from 0 to 2048 [ 413.876734][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.941875][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 413.960130][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 413.974123][T15354] device veth0_vlan entered promiscuous mode [ 413.990802][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.000024][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.019861][T15887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 414.023891][T15354] device veth1_vlan entered promiscuous mode [ 414.046389][T15887] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 414.073334][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 414.082373][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 414.090581][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.099995][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.114908][T15354] device veth0_macvtap entered promiscuous mode [ 414.191037][T15854] loop1: detected capacity change from 0 to 32768 [ 414.194613][T15354] device veth1_macvtap entered promiscuous mode [ 414.201410][T15887] EXT4-fs (loop0): resizing filesystem from 256 to 0 blocks [ 414.212683][T15887] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 414.273468][T14668] EXT4-fs (loop0): unmounting filesystem. [ 414.347757][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.393641][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.418374][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.431465][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.451401][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.480343][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.509111][T15912] loop4: detected capacity change from 0 to 1024 [ 414.515800][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.536140][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.551455][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.565693][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.601751][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.614527][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.635621][ T26] audit: type=1804 audit(1721746338.345:172): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1437" name="/newroot/62/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 414.674223][T15354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.688088][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.691723][ T3560] Bluetooth: hci6: command tx timeout [ 414.710657][T15915] syz.4.1437: attempt to access beyond end of device [ 414.710657][T15915] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 414.748488][T15915] buffer_io_error: 26 callbacks suppressed [ 414.748508][T15915] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 414.751538][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.810692][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.827875][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.855667][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.879741][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.898769][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.909386][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.926813][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.940117][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.956318][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.984865][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.018760][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.029903][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.047528][T15354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.059171][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.079208][T15354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.129463][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 415.142059][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.176841][T15354] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.210587][T15354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.256361][T15932] loop4: detected capacity change from 0 to 512 [ 415.263158][T15354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.281108][T15354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.281194][T15932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 415.422957][T15932] EXT4-fs (loop4): 1 truncate cleaned up [ 415.428660][T15932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 415.857797][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.089610][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.297536][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.311166][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.369068][T12616] EXT4-fs (loop4): unmounting filesystem. [ 416.373970][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.468353][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 416.500106][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.519384][T15969] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.526637][T15969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.545035][T15974] loop4: detected capacity change from 0 to 2048 [ 416.632531][T15974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 416.641073][T15974] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 416.707459][T15984] loop3: detected capacity change from 0 to 128 [ 416.827860][T15984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 416.982683][T15984] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 417.581183][T12616] EXT4-fs (loop4): unmounting filesystem. [ 417.758258][T15354] EXT4-fs (loop3): unmounting filesystem. [ 418.031829][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1450'. [ 418.045377][T15990] loop0: detected capacity change from 0 to 32768 [ 418.116779][T16011] fuse: Bad value for 'group_id' [ 418.147509][T15990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1446 (15990) [ 418.203928][T15990] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 418.234745][ T3560] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 418.241549][T15990] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 418.250987][T15990] BTRFS info (device loop0): setting nodatacow, compression disabled [ 418.253577][ T3560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 418.270051][T15990] BTRFS info (device loop0): turning on flush-on-commit [ 418.292755][ T3560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 418.318441][ T3560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 418.333243][ T3560] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 418.340563][ T3560] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 418.347812][T15990] BTRFS info (device loop0): enabling auto defrag [ 418.354666][T15990] BTRFS info (device loop0): max_inline at 0 [ 418.360785][T15990] BTRFS info (device loop0): using free space tree [ 418.448134][T16034] loop3: detected capacity change from 0 to 2048 [ 418.471098][T16034] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 418.572764][T16034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.817150][ T26] audit: type=1326 audit(1721746342.525:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 418.832160][T15990] BTRFS info (device loop0): enabling ssd optimizations [ 418.840211][ T26] audit: type=1326 audit(1721746342.525:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 418.910477][ T26] audit: type=1326 audit(1721746342.605:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd611175b1b code=0x7ffc0000 [ 418.970492][T16120] loop1: detected capacity change from 0 to 2048 [ 418.986872][T16120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.067842][ T26] audit: type=1326 audit(1721746342.605:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.167214][T16023] chnl_net:caif_netlink_parms(): no params data found [ 419.178747][ T26] audit: type=1326 audit(1721746342.605:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.358703][ T26] audit: type=1326 audit(1721746342.615:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.402310][ T26] audit: type=1326 audit(1721746342.615:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.439682][T16023] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.447961][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.458046][T16023] device bridge_slave_0 entered promiscuous mode [ 419.467252][T16023] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.474771][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.483444][T16023] device bridge_slave_1 entered promiscuous mode [ 419.505000][ T26] audit: type=1326 audit(1721746342.615:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.529240][ T26] audit: type=1326 audit(1721746342.615:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.577801][T16023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.589894][ T26] audit: type=1326 audit(1721746342.615:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 419.624733][T16023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.628493][T16200] loop4: detected capacity change from 0 to 4096 [ 419.668148][T14668] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.749065][T16023] team0: Port device team_slave_0 added [ 419.775244][T16200] ntfs: volume version 3.1. [ 419.819290][T16023] team0: Port device team_slave_1 added [ 419.846460][T16284] loop3: detected capacity change from 0 to 2048 [ 419.940652][T16284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.957634][T16284] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 420.048038][T16284] EXT4-fs (loop3): resizing filesystem from 256 to 0 blocks [ 420.064840][T16023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.080597][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.093624][T16284] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 420.154345][T16023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.158213][T16320] loop4: detected capacity change from 0 to 128 [ 420.202824][T15354] EXT4-fs (loop3): unmounting filesystem. [ 420.209197][T16023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.229374][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.257779][T16320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 420.297341][T16023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.319767][T16320] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038 (0x7fffffff) [ 420.461739][ T3557] Bluetooth: hci7: command tx timeout [ 420.478787][T16336] loop3: detected capacity change from 0 to 4096 [ 420.518205][T16326] fuse: Bad value for 'group_id' [ 420.579565][T16336] ntfs: volume version 3.1. [ 420.715005][T16023] device hsr_slave_0 entered promiscuous mode [ 420.920396][T16023] device hsr_slave_1 entered promiscuous mode [ 421.301555][T16023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.373726][T16023] Cannot create hsr debugfs directory [ 421.432558][T12616] EXT4-fs (loop4): unmounting filesystem. [ 422.534774][ T3560] Bluetooth: hci7: command tx timeout [ 422.733289][T16023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.818810][T16461] loop1: detected capacity change from 0 to 2048 [ 422.836754][T16464] loop3: detected capacity change from 0 to 1024 [ 422.912550][T16461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 422.931507][T16461] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 422.958930][T16023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.962261][T16471] syz.3.1471: attempt to access beyond end of device [ 422.962261][T16471] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 422.993973][T16427] loop4: detected capacity change from 0 to 40427 [ 423.003378][T16427] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 423.010362][T16427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 423.021203][T16471] Buffer I/O error on dev loop3, logical block 2889, lost async page write [ 423.032461][T16461] EXT4-fs (loop1): resizing filesystem from 256 to 0 blocks [ 423.039808][T16461] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 423.078028][T16427] F2FS-fs (loop4): invalid crc value [ 423.130897][T16427] F2FS-fs (loop4): Found nat_bits in checkpoint [ 423.137574][T16023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.163186][T11988] EXT4-fs (loop1): unmounting filesystem. [ 423.310146][T16427] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 423.322013][T16427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 423.334313][T16023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.544461][T12616] syz-executor: attempt to access beyond end of device [ 423.544461][T12616] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 423.572216][T16499] loop3: detected capacity change from 0 to 2048 [ 423.575800][T16458] loop0: detected capacity change from 0 to 40427 [ 423.612132][T12616] syz-executor: attempt to access beyond end of device [ 423.612132][T12616] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 423.642755][T16499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.681000][T16458] F2FS-fs (loop0): Found nat_bits in checkpoint [ 423.736768][T12616] syz-executor: attempt to access beyond end of device [ 423.736768][T12616] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 423.753175][T16023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 423.772993][T16023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.798192][T16023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 423.834015][T16458] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 423.843775][T16458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 423.853825][T16023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.183685][T16023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.319611][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.342534][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.374258][T16023] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.457084][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.492680][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.512166][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.523421][T16491] loop1: detected capacity change from 0 to 32768 [ 424.542800][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.549915][T13777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.566273][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.593840][T16491] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 424.593840][T16491] [ 424.607778][T13777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.616630][ T3560] Bluetooth: hci7: command tx timeout [ 424.623649][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.630769][T13777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.650728][T16491] ERROR: (device loop1): remounting filesystem as read-only [ 424.686145][T16491] jfs_lookup: dtSearch returned -5 [ 424.704305][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.722480][T16541] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 424.722480][T16541] [ 424.742376][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.758093][T16541] jfs_readdir: unexpected rc = -5 from dtReadNext [ 424.760710][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.784518][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.802342][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.823932][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.840342][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.861892][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.983285][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.039197][T16023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.089787][T16023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.140752][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.149734][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.202700][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.212788][T16549] loop1: detected capacity change from 0 to 1024 [ 425.236258][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.257401][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.374907][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.412717][ T3698] hfsplus: b-tree write err: -5, ino 4 [ 425.445416][ T3557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.476854][ T3557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.487431][ T3557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.502659][ T3557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.509872][T14050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.519861][ T3557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.527290][ T3557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.560740][ T26] kauditd_printk_skb: 87 callbacks suppressed [ 425.560754][ T26] audit: type=1326 audit(1721746349.265:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 425.606215][ T26] audit: type=1326 audit(1721746349.315:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ec6175b1b code=0x7ffc0000 [ 425.674380][T16576] openvswitch: netlink: Missing key (keys=40, expected=80) [ 425.731585][ T26] audit: type=1326 audit(1721746349.385:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 425.802011][ T26] audit: type=1326 audit(1721746349.385:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 425.806462][T16572] loop3: detected capacity change from 0 to 2048 [ 425.871516][ T26] audit: type=1326 audit(1721746349.385:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 425.934148][T16593] loop0: detected capacity change from 0 to 8 [ 425.988851][T16593] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 426.039671][ T26] audit: type=1326 audit(1721746349.385:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 426.071679][T16572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.175398][ T26] audit: type=1326 audit(1721746349.385:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 426.265389][ T26] audit: type=1326 audit(1721746349.385:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 426.334761][ T26] audit: type=1326 audit(1721746349.385:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 426.369356][ T26] audit: type=1326 audit(1721746349.385:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4ec6175f19 code=0x7ffc0000 [ 426.443230][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.450779][T13589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.577214][T16023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.691642][ T3557] Bluetooth: hci7: command tx timeout [ 426.718441][T16578] loop1: detected capacity change from 0 to 32768 [ 426.748263][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.763030][T16578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1484 (16578) [ 426.764423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.884814][T16578] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 426.935297][T16578] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 426.983028][T16578] BTRFS info (device loop1): setting nodatacow, compression disabled [ 426.991160][T16578] BTRFS info (device loop1): turning on flush-on-commit [ 427.055616][T16560] chnl_net:caif_netlink_parms(): no params data found [ 427.082635][T16578] BTRFS info (device loop1): enabling auto defrag [ 427.110432][T16578] BTRFS info (device loop1): max_inline at 0 [ 427.180670][T16578] BTRFS info (device loop1): using free space tree [ 427.216433][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.247192][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.255814][T16739] loop3: detected capacity change from 0 to 1024 [ 427.333200][T16023] device veth0_vlan entered promiscuous mode [ 427.387990][T16578] BTRFS info (device loop1): enabling ssd optimizations [ 427.481948][ T3645] hfsplus: b-tree write err: -5, ino 4 [ 427.544125][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.571374][ T3557] Bluetooth: hci1: command tx timeout [ 427.574231][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.659209][T16023] device veth1_vlan entered promiscuous mode [ 427.791678][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.831461][T13589] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 427.897774][T16793] loop0: detected capacity change from 0 to 512 [ 427.949545][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.962137][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.973687][T16023] device veth0_macvtap entered promiscuous mode [ 428.060490][T16793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 428.072941][T16793] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 428.084269][T16560] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.095512][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.102231][T11988] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 428.114041][T16560] device bridge_slave_0 entered promiscuous mode [ 428.131532][T13589] usb 4-1: Using ep0 maxpacket: 8 [ 428.142733][T16023] device veth1_macvtap entered promiscuous mode [ 428.261674][T13589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.307920][T13589] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 428.348799][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.359291][T13589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.359928][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.378129][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.412382][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.467570][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.693144][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.777710][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.051614][T13589] usb 4-1: config 0 descriptor?? [ 429.091984][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.094139][T13589] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 429.103085][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.134746][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.154429][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.185541][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.216468][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.248701][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.291572][T16023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.394226][T16560] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.423436][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.452682][T16560] device bridge_slave_1 entered promiscuous mode [ 429.470584][T14668] EXT4-fs (loop0): unmounting filesystem. [ 429.477707][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.502375][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.510531][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.551498][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.651454][ T3557] Bluetooth: hci1: command tx timeout [ 429.882050][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.907983][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.955931][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.971602][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.998832][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.010039][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.020885][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.033310][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.043325][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.054743][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.189049][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.304376][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.422101][T16023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.639665][T16023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.796013][T16023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.803613][T13589] gspca_vc032x: reg_w err -71 [ 430.808356][T13589] vc032x: probe of 4-1:0.0 failed with error -71 [ 430.817928][T13589] usb 4-1: USB disconnect, device number 16 [ 430.830933][T16560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.911805][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.933005][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.223524][T16023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.246920][T16023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.287877][T16023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.317328][T16023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.338357][T16560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.448561][T16560] team0: Port device team_slave_0 added [ 431.469368][T16560] team0: Port device team_slave_1 added [ 431.727506][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 431.938451][T16945] device bridge0 entered promiscuous mode [ 432.223765][ T3557] Bluetooth: hci1: command tx timeout [ 432.295015][T16560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.319955][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.426022][T16560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.450714][T16560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.466084][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.516488][T16560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.604908][ T11] device hsr_slave_0 left promiscuous mode [ 432.639941][ T11] device hsr_slave_1 left promiscuous mode [ 432.691124][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.722282][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 432.722298][ T26] audit: type=1326 audit(1721746356.435:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 432.751459][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.765774][T17019] loop1: detected capacity change from 0 to 512 [ 432.779791][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.797561][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.807668][ T26] audit: type=1326 audit(1721746356.465:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 432.834738][ T11] device bridge_slave_1 left promiscuous mode [ 432.841035][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.849889][ T6489] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.909747][ T11] device bridge_slave_0 left promiscuous mode [ 432.931552][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.939044][ T26] audit: type=1326 audit(1721746356.465:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd611175f19 code=0x7ffc0000 [ 433.021949][ T26] audit: type=1326 audit(1721746356.465:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd611175f53 code=0x7ffc0000 [ 433.066341][ T11] device veth1_macvtap left promiscuous mode [ 433.072485][ T26] audit: type=1326 audit(1721746356.475:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd611174a9f code=0x7ffc0000 [ 433.099142][ T11] device veth0_macvtap left promiscuous mode [ 433.111417][ T11] device veth1_vlan left promiscuous mode [ 433.121704][ T11] device veth0_vlan left promiscuous mode [ 433.131954][ T26] audit: type=1326 audit(1721746356.475:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd611175fa7 code=0x7ffc0000 [ 433.197372][T17040] loop1: detected capacity change from 0 to 512 [ 433.244754][ T26] audit: type=1326 audit(1721746356.475:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd611174950 code=0x7ffc0000 [ 433.309789][T17040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 433.323628][T17040] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 433.361390][ T26] audit: type=1326 audit(1721746356.475:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd611175b1b code=0x7ffc0000 [ 433.383996][ T26] audit: type=1326 audit(1721746356.505:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd611174c4a code=0x7ffc0000 [ 433.406617][ T26] audit: type=1326 audit(1721746356.505:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd611174c4a code=0x7ffc0000 [ 434.301789][ T3557] Bluetooth: hci1: command tx timeout [ 434.312659][T11988] EXT4-fs (loop1): unmounting filesystem. [ 434.393444][T17075] loop0: detected capacity change from 0 to 128 [ 434.412382][T17075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 434.449543][T17075] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 434.570463][T14668] EXT4-fs (loop0): unmounting filesystem. [ 435.022113][ T11] team0 (unregistering): Port device team_slave_1 removed [ 435.074980][ T11] team0 (unregistering): Port device team_slave_0 removed [ 435.120707][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.173457][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.685962][ T11] bond0 (unregistering): Released all slaves [ 436.148495][T16560] device hsr_slave_0 entered promiscuous mode [ 436.263701][T16560] device hsr_slave_1 entered promiscuous mode [ 436.282763][T16560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.291114][T16560] Cannot create hsr debugfs directory [ 436.326115][T17136] loop3: detected capacity change from 0 to 2048 [ 436.366301][T17136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.413486][T17142] loop0: detected capacity change from 0 to 512 [ 436.488705][ T4029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.512272][ T4029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.616815][T17142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.646327][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.662595][T17142] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038 (0x7fffffff) [ 436.890755][T17226] loop1: detected capacity change from 0 to 128 [ 436.930959][ T4029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.481018][ T4029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.525037][T17226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 437.541711][T17226] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 437.744880][T11988] EXT4-fs (loop1): unmounting filesystem. [ 437.753478][T14668] EXT4-fs (loop0): unmounting filesystem. [ 437.780079][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.976196][T17273] loop1: detected capacity change from 0 to 512 [ 438.026052][T17273] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1532: casefold flag without casefold feature [ 438.181506][ T3549] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 438.212197][T17273] EXT4-fs (loop1): Remounting filesystem read-only [ 438.241509][T17273] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1532: bad orphan inode 15 [ 438.281775][T17273] ext4_test_bit(bit=14, block=18) = 1 [ 438.294262][T17273] is_bad_inode(inode)=0 [ 438.298470][T17273] NEXT_ORPHAN(inode)=1023 [ 438.334744][T17273] max_ino=32 [ 438.338534][T17273] i_nlink=0 [ 438.385173][T17273] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 438.444034][T17273] ext4 filesystem being mounted at /90/bus supports timestamps until 2038 (0x7fffffff) [ 438.561936][ T3549] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.602993][ T3549] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.642543][ T3549] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.711728][T11988] EXT4-fs (loop1): unmounting filesystem. [ 438.842352][ T3549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 438.854921][T17342] loop3: detected capacity change from 0 to 128 [ 438.881336][ T3549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.889486][ T3549] usb 1-1: Product: syz [ 438.931806][ T3549] usb 1-1: Manufacturer: syz [ 438.936464][ T3549] usb 1-1: SerialNumber: syz [ 438.941101][T17342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 439.001562][T17342] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 439.048606][T17350] loop2: detected capacity change from 0 to 512 [ 439.075124][T16560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.103912][T16560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.129277][T17350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 439.141670][T17350] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 439.165797][T16560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 439.191937][T16560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.295966][T15354] EXT4-fs (loop3): unmounting filesystem. [ 439.402583][ T3549] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 439.826034][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.832830][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.053498][T13589] usb 1-1: USB disconnect, device number 14 [ 440.126514][T13589] usblp0: removed [ 440.132214][T17383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.140025][T17383] IPv6: NLM_F_CREATE should be set when creating new route [ 440.294271][T16023] EXT4-fs (loop2): unmounting filesystem. [ 440.351345][T16560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.403672][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.422388][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.457348][T16560] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.536753][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.557001][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.607439][T13657] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.614632][T13657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.701823][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.706686][T17401] loop2: detected capacity change from 0 to 4096 [ 440.710544][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.788961][T13657] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.796162][T13657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.887038][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.896904][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.961988][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.970863][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.070395][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.074790][T17426] loop0: detected capacity change from 0 to 512 [ 441.140070][T17426] EXT4-fs (loop0): failed to initialize system zone (-117) [ 441.168067][T17422] loop1: detected capacity change from 0 to 512 [ 441.179664][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.191840][T17426] EXT4-fs (loop0): mount failed [ 441.192306][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.235102][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.282131][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.290718][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.321992][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.330675][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.332499][T17422] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1550: casefold flag without casefold feature [ 441.354226][T16560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.461908][T17422] EXT4-fs (loop1): Remounting filesystem read-only [ 441.473163][T17422] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1550: bad orphan inode 15 [ 441.550635][T17422] ext4_test_bit(bit=14, block=18) = 1 [ 441.561413][T17422] is_bad_inode(inode)=0 [ 441.565600][T17422] NEXT_ORPHAN(inode)=1023 [ 441.569935][T17422] max_ino=32 [ 441.631332][T17422] i_nlink=0 [ 441.634568][T17422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 441.679554][T17422] ext4 filesystem being mounted at /93/bus supports timestamps until 2038 (0x7fffffff) [ 441.840827][T17452] loop2: detected capacity change from 0 to 1024 [ 441.873549][T11988] EXT4-fs (loop1): unmounting filesystem. [ 441.944893][T17452] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 441.988404][T17452] hfsplus: failed to load root directory [ 442.124500][T17452] loop2: detected capacity change from 0 to 1024 [ 442.191691][T17452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 442.248513][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.262196][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.275101][T16560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.303342][T17452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 442.331962][T13657] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 442.701579][T13657] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.721491][ T9572] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 442.721556][T13657] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.767730][T13657] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.961616][T13657] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 442.981656][T13657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.001496][ T9572] usb 3-1: Using ep0 maxpacket: 32 [ 443.010506][T13657] usb 2-1: Product: syz [ 443.030771][T13657] usb 2-1: Manufacturer: syz [ 443.041477][T13657] usb 2-1: SerialNumber: syz [ 443.121512][ T9572] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 443.152823][ T9572] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 443.177713][ T9572] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 443.197144][ T9572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.242820][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.262185][T17452] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 443.272594][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.292629][ T9572] hub 3-1:4.0: bad descriptor, ignoring hub [ 443.298586][ T9572] hub: probe of 3-1:4.0 failed with error -5 [ 443.353267][ T9572] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 443.364387][T13657] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 443.383771][T16560] device veth0_vlan entered promiscuous mode [ 443.856842][T16560] device veth1_vlan entered promiscuous mode [ 444.165914][T13655] usb 2-1: USB disconnect, device number 14 [ 444.189123][T13655] usblp0: removed [ 444.246534][T16560] device veth0_macvtap entered promiscuous mode [ 444.282068][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 444.296292][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.312207][T17548] loop0: detected capacity change from 0 to 512 [ 444.319596][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 444.340752][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 444.357619][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.382944][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.405743][T16560] device veth1_macvtap entered promiscuous mode [ 444.422789][T17548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 444.435733][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.443923][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.463843][T17548] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 444.488486][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.529299][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.567241][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.591428][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.611681][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.631832][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.656180][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.676379][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.697474][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.707614][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.757574][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.797652][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.817708][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.832167][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.855106][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.876092][T16560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.884598][T14668] EXT4-fs (loop0): unmounting filesystem. [ 444.908701][T17567] loop1: detected capacity change from 0 to 512 [ 444.930437][T17571] loop3: detected capacity change from 0 to 512 [ 444.946093][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.957025][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.960030][T17567] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1566: casefold flag without casefold feature [ 445.006917][T17571] EXT4-fs (loop3): failed to initialize system zone (-117) [ 445.012989][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.025060][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.035348][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.038435][T17571] EXT4-fs (loop3): mount failed [ 445.046195][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.061034][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.081315][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.101277][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.119612][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.131650][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.139973][T17567] EXT4-fs (loop1): Remounting filesystem read-only [ 445.142557][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.158853][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.169656][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.180145][T17567] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1566: bad orphan inode 15 [ 445.197714][T17567] ext4_test_bit(bit=14, block=18) = 1 [ 445.210083][T16560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.219039][T17567] is_bad_inode(inode)=0 [ 445.223749][T17567] NEXT_ORPHAN(inode)=1023 [ 445.239502][T17567] max_ino=32 [ 445.244328][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.246265][T17567] i_nlink=0 [ 445.257840][T17567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 445.267253][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.268933][T17567] ext4 filesystem being mounted at /95/bus supports timestamps until 2038 (0x7fffffff) [ 445.295978][T17452] syz.2.1554 (17452) used greatest stack depth: 19248 bytes left [ 445.307124][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.327074][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.349659][T17590] loop0: detected capacity change from 0 to 256 [ 445.364048][T16560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.391019][T17590] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 445.419335][T16560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.441618][T16560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.462667][T17590] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 445.482843][T16560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.484641][T17590] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 445.512432][T11988] EXT4-fs (loop1): unmounting filesystem. [ 445.519268][T16023] EXT4-fs (loop2): unmounting filesystem. [ 445.522129][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 445.522139][ T26] audit: type=1800 audit(1721746369.225:397): pid=17590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1567" name="file1" dev="loop0" ino=1048776 res=0 errno=0 [ 445.531505][ T33] usb 3-1: USB disconnect, device number 24 [ 445.587052][ T26] audit: type=1326 audit(1721746369.295:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17589 comm="syz.0.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36a2775f19 code=0x0 [ 445.627349][T17590] syz.0.1567 (17590) used greatest stack depth: 18912 bytes left [ 445.713964][T17609] loop2: detected capacity change from 0 to 512 [ 445.850750][T17609] EXT4-fs (loop2): 1 orphan inode deleted [ 445.923169][T17609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 445.962101][T17609] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 445.977176][T17629] loop1: detected capacity change from 0 to 2048 [ 446.000274][ T4029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.029220][T17629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 446.030179][ T4029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.861943][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.000496][ T4029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.000567][ T4029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.079521][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.169900][T17664] loop3: detected capacity change from 0 to 256 [ 448.242968][T17691] loop0: detected capacity change from 0 to 1024 [ 448.263053][T17691] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 448.263168][T17691] hfsplus: failed to load root directory [ 448.317014][T16023] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 448.320232][ T6489] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.362522][T16023] EXT4-fs (loop2): Remounting filesystem read-only [ 448.489116][T17691] loop0: detected capacity change from 0 to 1024 [ 448.497152][T11988] EXT4-fs (loop1): unmounting filesystem. [ 448.497282][T16023] EXT4-fs (loop2): unmounting filesystem. [ 448.574428][T17691] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 448.841158][T17691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 449.558582][T17727] loop1: detected capacity change from 0 to 1024 [ 449.654417][T17727] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 449.681591][T17727] hfsplus: failed to load root directory [ 449.691637][ T3600] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 449.724348][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 449.916279][ T3698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.931390][ T3600] usb 1-1: Using ep0 maxpacket: 32 [ 450.052422][ T3600] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 450.083989][ T3600] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 450.141324][ T3600] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 450.168226][ T3600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.175422][T17689] loop4: detected capacity change from 0 to 40427 [ 450.202415][T17729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 450.244958][ T3600] hub 1-1:4.0: bad descriptor, ignoring hub [ 450.258384][T17689] F2FS-fs (loop4): invalid crc value [ 450.266305][ T3600] hub: probe of 1-1:4.0 failed with error -5 [ 450.296192][ T3600] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 450.310536][T17689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 450.331439][T13657] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 450.363290][ T3698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.418258][T17689] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 450.444993][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 450.454044][T17689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 450.553216][ T3698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.555851][T17689] syz.4.1577: attempt to access beyond end of device [ 450.555851][T17689] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 450.699934][ T3698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.711506][ T3560] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.711556][T13657] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 450.711579][T13657] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.711598][T13657] usb 2-1: config 0 has no interface number 0 [ 450.745894][ T3560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 450.755983][ T3563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 450.764368][ T3563] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 450.775345][ T3563] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 450.784038][ T3563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 450.802225][T13657] usb 2-1: config 0 interface 31 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 450.812382][T13657] usb 2-1: config 0 interface 31 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 450.825787][T13657] usb 2-1: New USB device found, idVendor=04f2, idProduct=b071, bcdDevice=40.e6 [ 450.843746][T13657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.856279][T13657] usb 2-1: config 0 descriptor?? [ 450.903623][T13657] usb 2-1: Found UVC 0.00 device (04f2:b071) [ 450.928423][T13657] usb 2-1: No valid video chain found. [ 451.141364][ T33] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 451.249851][T13589] usb 2-1: USB disconnect, device number 15 [ 451.401621][ T33] usb 4-1: Using ep0 maxpacket: 8 [ 451.535139][T17780] chnl_net:caif_netlink_parms(): no params data found [ 451.535199][ T33] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.581551][ T33] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 451.596576][T17920] loop4: detected capacity change from 0 to 256 [ 451.606859][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.627624][ T33] usb 4-1: config 0 descriptor?? [ 451.683899][ T33] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 451.782638][T17780] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.789845][T17780] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.807990][T17780] device bridge_slave_0 entered promiscuous mode [ 451.858393][T17691] syz.0.1578 (17691) used greatest stack depth: 18456 bytes left [ 451.871387][T17780] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.878543][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.906104][T17780] device bridge_slave_1 entered promiscuous mode [ 451.968566][T14668] EXT4-fs (loop0): unmounting filesystem. [ 451.988731][T17992] loop1: detected capacity change from 0 to 1024 [ 452.061509][ T9572] usb 1-1: USB disconnect, device number 15 [ 452.074727][T17992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 452.113931][T17780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.139350][T17780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.158256][T18028] loop0: detected capacity change from 0 to 1024 [ 452.173550][T18028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.197227][T18028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 452.248478][T11988] EXT4-fs (loop1): unmounting filesystem. [ 452.304761][T14668] EXT4-fs (loop0): unmounting filesystem. [ 452.341910][T17780] team0: Port device team_slave_0 added [ 452.370514][T17780] team0: Port device team_slave_1 added [ 452.464248][T18072] loop0: detected capacity change from 0 to 1024 [ 452.579056][T18072] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 452.598179][T18072] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038 (0x7fffffff) [ 452.619550][T17780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.634391][ T26] audit: type=1800 audit(1721746376.345:399): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1594" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 452.698961][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.718269][T14668] EXT4-fs (loop0): unmounting filesystem. [ 452.806595][T17780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.871710][ T3563] Bluetooth: hci7: command tx timeout [ 452.882977][T18119] loop0: detected capacity change from 0 to 1024 [ 452.919141][T18119] EXT4-fs: Ignoring removed bh option [ 452.979348][T18119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 452.991599][ T33] gspca_vc032x: reg_w err -71 [ 452.996612][T18119] System zones: 0-1, 3-12 [ 453.002370][ T33] vc032x: probe of 4-1:0.0 failed with error -71 [ 453.010054][T18119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 453.036085][ T33] usb 4-1: USB disconnect, device number 17 [ 453.134388][T14668] EXT4-fs (loop0): unmounting filesystem. [ 453.142307][T17780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.153837][T17780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.159136][T18123] fuse: Bad value for 'group_id' [ 453.189244][T17780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.279146][T18130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1599'. [ 453.287063][T18153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.350227][T17780] device hsr_slave_0 entered promiscuous mode [ 453.361533][T17780] device hsr_slave_1 entered promiscuous mode [ 453.393313][T17780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.400924][T17780] Cannot create hsr debugfs directory [ 453.507760][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 453.660310][T18199] loop4: detected capacity change from 0 to 1024 [ 453.700726][T18199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.761935][T18199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 453.793212][ T3698] device hsr_slave_0 left promiscuous mode [ 453.832364][ T3698] device hsr_slave_1 left promiscuous mode [ 453.841333][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.851319][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.909944][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.923925][T16560] EXT4-fs (loop4): unmounting filesystem. [ 453.925995][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.969250][ T3698] device bridge_slave_1 left promiscuous mode [ 453.976007][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.038228][ T3698] device bridge_slave_0 left promiscuous mode [ 454.054791][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.067267][T18242] loop1: detected capacity change from 0 to 1024 [ 454.140634][T18247] loop4: detected capacity change from 0 to 4096 [ 454.152065][T18242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 454.160798][ T3698] device veth1_macvtap left promiscuous mode [ 454.166197][T18242] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038 (0x7fffffff) [ 454.171779][ T3698] device veth0_macvtap left promiscuous mode [ 454.207127][ T3698] device veth1_vlan left promiscuous mode [ 454.240388][ T26] audit: type=1800 audit(1721746377.945:400): pid=18242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1607" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 454.245812][ T3698] device veth0_vlan left promiscuous mode [ 454.369532][T11988] EXT4-fs (loop1): unmounting filesystem. [ 454.498364][T18262] loop4: detected capacity change from 0 to 256 [ 454.543397][T18262] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 454.592712][T18262] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 454.645491][T18262] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 454.922642][ T26] audit: type=1800 audit(1721746378.635:401): pid=18262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1609" name="file1" dev="loop4" ino=1048784 res=0 errno=0 [ 454.945827][ T3563] Bluetooth: hci7: command tx timeout [ 455.252713][ T26] audit: type=1326 audit(1721746378.965:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz.4.1609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1c9175f19 code=0x0 [ 455.764778][ T3563] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 456.000039][T18298] syz.4.1615 (18298): attempted to duplicate a private mapping with mremap. This is not supported. [ 456.439107][T18281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.476893][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 456.573652][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 456.680035][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.703053][T18302] loop3: detected capacity change from 0 to 1024 [ 456.710169][T18302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 456.756879][T18302] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 456.785534][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.858609][T15354] EXT4-fs (loop3): unmounting filesystem. [ 456.959209][T18314] loop3: detected capacity change from 0 to 1024 [ 456.997474][T18314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 457.006192][T18314] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 457.021391][ T3563] Bluetooth: hci7: command tx timeout [ 457.048066][ T26] audit: type=1800 audit(1721746380.755:403): pid=18314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1618" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 457.072086][T15354] EXT4-fs (loop3): unmounting filesystem. [ 457.480147][ T3698] bond0 (unregistering): Released all slaves [ 457.576354][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 457.588516][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 458.167246][T18391] loop4: detected capacity change from 0 to 1024 [ 458.202921][T18391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.274077][T18391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 458.360774][T18401] loop0: detected capacity change from 0 to 1024 [ 458.454296][T18401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 458.476721][T18401] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038 (0x7fffffff) [ 458.488649][T16560] EXT4-fs (loop4): unmounting filesystem. [ 458.514391][ T26] audit: type=1800 audit(1721746382.225:404): pid=18401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1628" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 458.603372][T14668] EXT4-fs (loop0): unmounting filesystem. [ 458.812730][T18434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.091527][ T3563] Bluetooth: hci7: command tx timeout [ 459.103460][T17780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.168542][T17780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.204565][T17780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.253039][T17780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.271309][ T33] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 459.558685][T17780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.598412][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.607079][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.631607][ T33] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 459.652090][T17780] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.689208][ T33] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 0 [ 459.719753][ T33] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.768999][T17780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.779706][ T33] usb 5-1: config 1 interface 0 has no altsetting 0 [ 459.821930][T17780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.882240][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.910342][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.937241][T13659] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.944449][T13659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.971782][ T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 460.000345][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.017081][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.030826][ T33] usb 5-1: Product: syz [ 460.058950][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.071319][ T33] usb 5-1: Manufacturer: syz [ 460.075957][ T33] usb 5-1: SerialNumber: syz [ 460.100681][T13659] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.107897][T13659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.167982][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.194024][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.234384][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.248913][T18499] loop1: detected capacity change from 0 to 512 [ 460.257456][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.276843][T18499] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.284584][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.314801][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.322124][T18499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 460.342415][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.374666][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.391393][T13589] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 460.393136][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.419354][T18499] EXT4-fs (loop1): 1 truncate cleaned up [ 460.426100][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.439764][T18499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 460.450616][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.472100][T18508] sg_write: data in/out 4060/14 bytes for SCSI command 0x0-- guessing data in; [ 460.472100][T18508] program syz.4.1632 not setting count and/or reply_len properly [ 460.510656][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.553099][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.651408][T13589] usb 1-1: Using ep0 maxpacket: 16 [ 460.951548][T13589] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 460.973197][T13589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.006212][T11988] EXT4-fs (loop1): unmounting filesystem. [ 461.028576][T13589] usb 1-1: Product: syz [ 461.035251][T13589] usb 1-1: Manufacturer: syz [ 461.039875][T13589] usb 1-1: SerialNumber: syz [ 461.082206][T13589] usb 1-1: config 0 descriptor?? [ 461.098067][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.128057][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.157414][T17780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.239933][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.256842][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.300515][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.317306][T13657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.342245][T17780] device veth0_vlan entered promiscuous mode [ 461.365276][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.387431][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.391020][T13589] usb 1-1: USB disconnect, device number 16 [ 461.437860][T17780] device veth1_vlan entered promiscuous mode [ 461.492588][ T3600] usb 5-1: USB disconnect, device number 17 [ 461.533873][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.543351][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.569134][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.610996][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.649318][T17780] device veth0_macvtap entered promiscuous mode [ 461.687459][T17780] device veth1_macvtap entered promiscuous mode [ 461.756104][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.789386][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.826333][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.851629][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.891316][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.919230][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.960604][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.001458][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.021441][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.049238][T18518] loop3: detected capacity change from 0 to 40427 [ 462.055921][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.091469][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.153194][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.170351][T18518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 462.182503][T18556] loop0: detected capacity change from 0 to 2048 [ 462.191196][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.202577][T18564] loop1: detected capacity change from 0 to 256 [ 462.238200][T18556] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.247092][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.324987][T17780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.328144][T18564] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 462.359394][T18567] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.359645][T18556] syz.0.1641: attempt to access beyond end of device [ 462.359645][T18556] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 462.391863][T18518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 462.400427][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 462.409752][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.434113][T18564] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 462.439775][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.468788][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.486828][T18564] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 462.498443][T18518] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 462.520588][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.536575][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.562071][ T26] audit: type=1800 audit(1721746386.275:405): pid=18564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1642" name="file1" dev="loop1" ino=1048785 res=0 errno=0 [ 462.567615][T18518] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 462.602820][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.628522][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.640622][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.662331][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.680663][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.711989][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.722411][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.733107][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.748286][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.758869][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.768735][T17780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.779338][T17780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.791074][T17780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.818522][T15354] syz-executor: attempt to access beyond end of device [ 462.818522][T15354] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 462.845141][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.860864][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.866814][ T26] audit: type=1326 audit(1721746386.575:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18563 comm="syz.1.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd611175f19 code=0x0 [ 462.884492][T17780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.944027][T17780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.967207][T17780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.034517][T17780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.382114][ T6571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.390566][ T6571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.477329][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.553225][T10830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.571777][T10830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.597110][T18630] sctp: [Deprecated]: syz.4.1650 (pid 18630) Use of int in max_burst socket option. [ 463.597110][T18630] Use struct sctp_assoc_value instead [ 463.611129][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.331697][T18643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.517999][T18651] loop2: detected capacity change from 0 to 2048 [ 464.556586][T18651] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 464.670206][T18651] syz.2.1653: attempt to access beyond end of device [ 464.670206][T18651] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 464.684721][T18662] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.911280][T13659] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 465.282234][T13659] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 465.329458][T13659] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 0 [ 465.619803][T13659] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.912011][T13659] usb 1-1: config 1 interface 0 has no altsetting 0 [ 466.181407][T13659] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 466.190508][T13659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.211312][T13659] usb 1-1: Product: syz [ 466.215526][T13659] usb 1-1: Manufacturer: syz [ 466.232327][T13659] usb 1-1: SerialNumber: syz [ 467.097379][T18659] sg_write: data in/out 4060/14 bytes for SCSI command 0x0-- guessing data in; [ 467.097379][T18659] program syz.0.1654 not setting count and/or reply_len properly [ 467.491567][ T3557] Bluetooth: hci2: command 0x0406 tx timeout [ 468.963867][ T3602] usb 1-1: USB disconnect, device number 17 [ 469.090416][T18773] vhci_hcd: invalid port number 0 [ 469.538915][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1676'. [ 469.733295][T18799] loop2: detected capacity change from 0 to 1024 [ 472.343985][T18833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1687'. [ 472.401333][T18833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1687'. [ 472.429285][T18833] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.470608][T18837] vhci_hcd: invalid port number 0 [ 472.491664][T18833] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.498852][T18833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.011547][ T3563] Bluetooth: hci3: command 0x0406 tx timeout [ 473.219489][T18867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1697'. [ 473.278570][T18867] loop4: detected capacity change from 0 to 1024 [ 474.126639][T18876] netlink: 1392 bytes leftover after parsing attributes in process `syz.4.1698'. [ 474.140231][ T26] audit: type=1326 audit(1721746397.845:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18857 comm="syz.2.1695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2b75f19 code=0x0 [ 474.682171][T18897] tmpfs: Bad value for 'mpol' [ 474.731019][T18897] loop3: detected capacity change from 0 to 1024 [ 474.761360][T18897] hfsplus: unable to parse mount options [ 474.810929][ T3602] kernel write not supported for file /vcs (pid: 3602 comm: kworker/0:6) [ 474.935162][T18917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1706'. [ 474.935197][T18917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1706'. [ 474.935267][T18917] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.944060][T18917] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.944155][T18917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.237336][T18940] netlink: 1392 bytes leftover after parsing attributes in process `syz.2.1710'. [ 475.429264][T18950] loop0: detected capacity change from 0 to 256 [ 475.453172][T18950] exfat: Deprecated parameter 'utf8' [ 475.502478][T18950] exfat: Deprecated parameter 'utf8' [ 475.545676][T18950] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 476.408580][T19021] netlink: 1392 bytes leftover after parsing attributes in process `syz.0.1723'. [ 477.224449][T19025] loop0: detected capacity change from 0 to 1024 [ 477.298489][T19025] hfsplus: bad catalog entry type [ 477.432460][ T9] hfsplus: b-tree write err: -5, ino 4 [ 477.465006][T19035] tmpfs: Bad value for 'mpol' [ 477.498977][T19035] loop2: detected capacity change from 0 to 1024 [ 477.507994][T19035] hfsplus: unable to parse mount options [ 477.824176][ T3557] Bluetooth: hci4: command 0x0406 tx timeout [ 478.905842][T19096] loop0: detected capacity change from 0 to 256 [ 478.957167][T19096] exfat: Deprecated parameter 'namecase' [ 479.256822][T19096] exfat: Deprecated parameter 'utf8' [ 479.456159][T19096] exfat: Deprecated parameter 'namecase' [ 479.695964][T19123] loop3: detected capacity change from 0 to 1024 [ 479.700030][T19096] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 479.737458][T19123] hfsplus: bad catalog entry type [ 479.878898][ T9945] hfsplus: b-tree write err: -5, ino 4 [ 480.971510][ T26] audit: type=1326 audit(1721746404.685:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19126 comm="syz.2.1740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2b75f19 code=0x0 [ 481.436208][T19178] loop3: detected capacity change from 0 to 256 [ 481.463487][T19178] exfat: Deprecated parameter 'utf8' [ 481.479341][T19178] exfat: Deprecated parameter 'utf8' [ 481.484996][ T3693] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 481.528732][T19178] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 481.861676][ T3693] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 481.908407][ T3693] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 0 [ 481.938581][ T3693] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.981647][ T3693] usb 5-1: config 1 interface 0 has no altsetting 0 [ 482.151511][ T3693] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 482.188245][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.208669][ T3693] usb 5-1: Product: syz [ 482.218613][ T3693] usb 5-1: Manufacturer: syz [ 482.251974][T19183] loop2: detected capacity change from 0 to 32768 [ 482.261760][ T3693] usb 5-1: SerialNumber: syz [ 482.279032][T19183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1749 (19183) [ 482.292496][T19198] tmpfs: Bad value for 'mpol' [ 482.303276][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 482.336881][T19183] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 482.369795][T19198] loop3: detected capacity change from 0 to 1024 [ 482.381934][T19183] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 482.406680][T19198] hfsplus: unable to parse mount options [ 482.433236][T19183] BTRFS info (device loop2): using free space tree [ 482.595566][T19227] sg_write: data in/out 4060/14 bytes for SCSI command 0x0-- guessing data in; [ 482.595566][T19227] program syz.4.1746 not setting count and/or reply_len properly [ 482.667141][T19183] BTRFS info (device loop2): enabling ssd optimizations [ 482.690690][ T3563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.708113][ T3563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.729070][ T3563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.741759][ T3563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.749760][ T3563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 482.766026][ T3563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.015023][T17780] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 483.519496][T19230] chnl_net:caif_netlink_parms(): no params data found [ 483.649639][T19381] loop1: detected capacity change from 0 to 256 [ 483.662920][T13655] usb 5-1: USB disconnect, device number 18 [ 483.712608][T19381] exfat: Deprecated parameter 'utf8' [ 483.717998][T19381] exfat: Deprecated parameter 'utf8' [ 483.773424][T19230] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.797711][T19381] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 483.805378][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.873332][T19230] device bridge_slave_0 entered promiscuous mode [ 483.912776][T19230] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.950899][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.982328][T19230] device bridge_slave_1 entered promiscuous mode [ 484.131088][T19230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.158363][T19230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.229202][T19230] team0: Port device team_slave_0 added [ 484.247937][T19230] team0: Port device team_slave_1 added [ 484.284055][ T26] audit: type=1800 audit(1721746408.005:409): pid=19521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 484.325663][T19230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.340798][T19230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.419242][T19230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.460623][T19230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.469511][T19230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.496005][T19230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.618270][T19230] device hsr_slave_0 entered promiscuous mode [ 484.668248][T19230] device hsr_slave_1 entered promiscuous mode [ 484.685775][T19230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.701295][T19230] Cannot create hsr debugfs directory [ 484.788696][T19576] fuse: Bad value for 'fd' [ 484.853027][ T3557] Bluetooth: hci5: command tx timeout [ 485.426869][ T3834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.941615][ T3602] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 486.291842][ T3834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.291852][ T3602] usb 4-1: too many configurations: 164, using maximum allowed: 8 [ 486.435186][ T3834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.616627][ T3834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.890053][ T26] audit: type=1326 audit(1721746410.595:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19635 comm="syz.4.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1c9175f19 code=0x0 [ 486.931524][ T3557] Bluetooth: hci5: command tx timeout [ 487.061506][ T3602] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 487.079445][ T3602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.118062][ T3602] usb 4-1: config 0 descriptor?? [ 487.168439][ T3602] usb 4-1: bad CDC descriptors [ 487.184892][ T3602] usb 4-1: bad CDC descriptors [ 487.405562][T19706] loop1: detected capacity change from 0 to 512 [ 487.514610][T19706] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 487.527379][T19706] EXT4-fs (loop1): 1 truncate cleaned up [ 487.533838][T19706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 487.856586][T19733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1788'. [ 487.863991][T19732] loop4: detected capacity change from 0 to 1024 [ 487.876208][T19733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'. [ 487.892341][T19733] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.409918][T19733] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.417162][T19733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.429453][T19732] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 488.438176][T19732] hfsplus: failed to load root directory [ 488.546790][ T3602] usb 4-1: USB disconnect, device number 18 [ 488.635902][T11988] EXT4-fs (loop1): unmounting filesystem. [ 488.724950][T19732] loop4: detected capacity change from 0 to 1024 [ 488.767242][T19732] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 488.882767][T19732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 489.011564][ T3557] Bluetooth: hci5: command tx timeout [ 489.076714][T19230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 489.201337][ T3693] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 489.251770][T19230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 489.351459][T19230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 489.375355][T19230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 489.451822][ T3693] usb 5-1: Using ep0 maxpacket: 32 [ 489.554410][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'. [ 489.565678][T19811] loop2: detected capacity change from 0 to 1024 [ 489.572186][ T3693] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 489.572219][ T3693] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 489.572254][ T3693] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 489.572276][ T3693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.591636][T19732] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.712343][T19811] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1802: Invalid block bitmap block 0 in block_group 0 [ 489.734097][ T3693] hub 5-1:4.0: bad descriptor, ignoring hub [ 489.740482][ T3693] hub: probe of 5-1:4.0 failed with error -5 [ 489.752226][T19811] Quota error (device loop2): write_blk: dquota write failed [ 489.767291][ T3693] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 489.781564][T19811] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 489.804574][T19811] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.1802: Failed to acquire dquot type 0 [ 489.907794][T19811] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.1802: Freeing blocks not in datazone - block = 0, count = 4096 [ 489.975078][T19811] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1802: Invalid inode bitmap blk 0 in block_group 0 [ 490.009296][ T4029] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 490.039442][T19811] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 490.056937][ T4029] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:14: Failed to release dquot type 0 [ 490.065630][T19811] EXT4-fs (loop2): 1 orphan inode deleted [ 490.326603][T19811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 491.091377][ T3557] Bluetooth: hci5: command tx timeout [ 491.111606][T19230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.155522][ T3834] device hsr_slave_0 left promiscuous mode [ 491.162819][T17780] EXT4-fs (loop2): unmounting filesystem. [ 491.175486][ T3834] device hsr_slave_1 left promiscuous mode [ 491.210505][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.236931][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.256909][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.274880][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.300724][ T3834] device bridge_slave_1 left promiscuous mode [ 491.317819][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.349169][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.434811][T19875] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 491.443224][ T3834] device veth1_macvtap left promiscuous mode [ 491.449265][ T3834] device veth0_macvtap left promiscuous mode [ 491.453507][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 491.455998][ T3834] device veth1_vlan left promiscuous mode [ 491.470321][ T3834] device veth0_vlan left promiscuous mode [ 491.831486][ T33] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 492.142334][ T33] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 492.232883][T16560] EXT4-fs (loop4): unmounting filesystem. [ 492.322458][ T3600] usb 5-1: USB disconnect, device number 19 [ 492.781987][T19894] loop3: detected capacity change from 0 to 32768 [ 492.823251][ T33] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 492.831670][T19894] XFS: noikeep mount option is deprecated. [ 492.838343][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.857623][ T33] usb 3-1: config 0 descriptor?? [ 492.878016][T19894] XFS (loop3): Mounting V5 Filesystem [ 492.933525][ T33] usb 3-1: bad CDC descriptors [ 492.939472][ T33] usb 3-1: bad CDC descriptors [ 493.014067][T19894] XFS (loop3): Ending clean mount [ 493.038217][T19894] XFS (loop3): Quotacheck needed: Please wait. [ 493.153425][T19894] XFS (loop3): Quotacheck: Done. [ 493.306986][ T3834] team0 (unregistering): Port device team_slave_1 removed [ 493.368378][ T3834] team0 (unregistering): Port device team_slave_0 removed [ 493.379446][T15354] XFS (loop3): Unmounting Filesystem [ 493.438016][ T3834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.510477][ T3834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.001413][ T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 494.086607][ T3834] bond0 (unregistering): Released all slaves [ 494.173414][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.181081][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.215794][T19230] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.261824][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.282135][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.297983][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.305163][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.329708][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.347397][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.357129][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.364382][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.381501][ T14] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 494.390136][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.394738][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.426128][ T14] usb 4-1: config 0 descriptor?? [ 494.455351][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 494.465805][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 494.482458][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 494.490473][ T14] cp210x 4-1:0.0: cp210x converter detected [ 494.503816][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.533861][T13655] usb 3-1: USB disconnect, device number 25 [ 494.556123][T19230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.613171][T19230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.695580][T19951] loop4: detected capacity change from 0 to 64 [ 494.726317][T19951] hfs: unable to parse mount options [ 494.763143][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.773962][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 494.784996][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.800253][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.809134][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.818258][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.838857][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.893635][T19956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1823'. [ 494.958633][T19956] loop2: detected capacity change from 0 to 1024 [ 495.341580][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.470400][ T14] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 495.491987][ T14] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 495.499684][ T14] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 495.508375][ T14] usb 4-1: cp210x converter now attached to ttyUSB0 [ 495.519460][ T14] usb 4-1: USB disconnect, device number 19 [ 495.528361][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 495.536952][ T14] cp210x 4-1:0.0: device disconnected [ 495.569662][T19951] loop4: detected capacity change from 0 to 256 [ 495.600609][T19969] loop1: detected capacity change from 0 to 1024 [ 495.625949][T19969] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 495.671370][T19969] hfsplus: failed to load root directory [ 495.840923][T19969] loop1: detected capacity change from 0 to 1024 [ 495.883471][T19969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 495.967948][T19230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.969330][T19969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 496.029243][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.050869][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.109279][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.124855][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.207790][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.216012][T13655] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 496.225089][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.237227][T19230] device veth0_vlan entered promiscuous mode [ 496.246520][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.256507][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.257059][T20016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 496.278830][T19230] device veth1_vlan entered promiscuous mode [ 496.288863][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 496.310128][T20016] netlink: 'syz.4.1831': attribute type 1 has an invalid length. [ 496.330362][T20016] netlink: 'syz.4.1831': attribute type 2 has an invalid length. [ 496.340088][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 496.348202][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 496.358147][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 496.400824][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.422255][T13659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.448422][T19230] device veth0_macvtap entered promiscuous mode [ 496.461540][ T3693] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 496.501150][T19230] device veth1_macvtap entered promiscuous mode [ 496.591443][T13655] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.595223][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.624922][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.643596][T20022] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 496.644253][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.675373][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.685704][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.697692][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.709604][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.720420][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.723112][ T3693] usb 2-1: Using ep0 maxpacket: 32 [ 496.731360][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.766649][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.784752][T13655] usb 3-1: New USB device found, idVendor=2040, idProduct=c609, bcdDevice=e8.a7 [ 496.786979][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.811673][T13655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.824887][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.831570][T13655] usb 3-1: Product: syz [ 496.845288][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.849304][T13655] usb 3-1: Manufacturer: syz [ 496.860958][T13655] usb 3-1: SerialNumber: syz [ 496.871374][ T3693] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 496.871430][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.890066][ T3693] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 496.903602][T13655] usb 3-1: config 0 descriptor?? [ 496.913145][ T3693] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 496.922784][ T3693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.948715][T13655] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 496.964337][T19230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.982309][T19969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 496.996056][T13655] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 497.003675][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 497.008793][ T3693] hub 2-1:4.0: bad descriptor, ignoring hub [ 497.024630][ T3693] hub: probe of 2-1:4.0 failed with error -5 [ 497.032767][ T3693] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 497.042427][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 497.069340][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.089370][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.121843][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.160174][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.202250][ T14] usb 3-1: USB disconnect, device number 26 [ 497.235934][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.245879][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.258055][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.268138][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.279987][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.294522][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.305124][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.329499][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.372748][T20066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1835'. [ 497.438100][T20066] loop3: detected capacity change from 0 to 1024 [ 497.613869][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.761826][T19230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.949547][T19230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.046356][T19230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.080829][T13658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.102682][T13658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.126904][T19230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.143013][T19230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.147815][T13775] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 498.153095][T19230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.168400][T19230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.307685][T20082] loop3: detected capacity change from 0 to 64 [ 498.330533][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.349327][T20082] hfs: unable to parse mount options [ 498.349395][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.400078][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.407703][ T6571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.417675][ T6571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.437743][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.538608][T20082] loop3: detected capacity change from 0 to 256 [ 498.545445][T13775] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 498.568337][T13775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.619285][T13775] usb 5-1: config 0 descriptor?? [ 498.662641][T13775] cp210x 5-1:0.0: cp210x converter detected [ 499.112425][T13775] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 499.171736][T13775] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 499.179587][T13775] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 499.226491][T13775] usb 5-1: cp210x converter now attached to ttyUSB0 [ 499.248922][T13775] usb 5-1: USB disconnect, device number 20 [ 499.285720][T11988] EXT4-fs (loop1): unmounting filesystem. [ 499.287076][T13775] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.317518][T20141] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 499.350872][T13775] cp210x 5-1:0.0: device disconnected [ 499.401461][ T14] usb 2-1: USB disconnect, device number 16 [ 499.455770][T20167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1850'. [ 499.498596][T20167] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 499.551578][T20167] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 499.600221][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 500.050599][T20197] Invalid ELF header magic: != ELF [ 500.226740][T20127] loop0: detected capacity change from 0 to 32768 [ 500.341559][ T3602] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 500.835837][ T3602] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 501.298143][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.314651][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.832586][T20243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1868'. [ 501.846992][T20243] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 501.856354][T20243] netlink: 'syz.4.1868': attribute type 2 has an invalid length. [ 501.865577][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 501.921564][ T3602] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 501.951509][ T3602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.982657][ T3602] usb 3-1: config 0 descriptor?? [ 501.986676][T20252] loop3: detected capacity change from 0 to 512 [ 502.000221][ T3557] ================================================================== [ 502.008314][ T3557] BUG: KASAN: use-after-free in __lock_acquire+0x77/0x1f80 [ 502.011485][ T33] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 502.015601][ T3557] Read of size 8 at addr ffff888058c320b0 by task kworker/u5:4/3557 [ 502.015621][ T3557] [ 502.015640][ T3557] CPU: 0 PID: 3557 Comm: kworker/u5:4 Not tainted 6.1.100-syzkaller #0 [ 502.041689][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 502.051752][ T3557] Workqueue: hci1 hci_rx_work [ 502.056457][ T3557] Call Trace: [ 502.059740][ T3557] [ 502.062674][ T3557] dump_stack_lvl+0x1e3/0x2cb [ 502.067363][ T3557] ? nf_tcp_handle_invalid+0x642/0x642 [ 502.072816][ T3557] ? panic+0x764/0x764 [ 502.076872][ T3557] ? _printk+0xd1/0x111 [ 502.081010][ T3557] ? __virt_addr_valid+0x17f/0x530 [ 502.086112][ T3557] ? __virt_addr_valid+0x17f/0x530 [ 502.091215][ T3557] print_report+0x15f/0x4f0 [ 502.095710][ T3557] ? __virt_addr_valid+0x17f/0x530 [ 502.100808][ T3557] ? __virt_addr_valid+0x17f/0x530 [ 502.105904][ T3557] ? __virt_addr_valid+0x45b/0x530 [ 502.111002][ T3557] ? __phys_addr+0xb6/0x170 [ 502.115490][ T3557] ? __lock_acquire+0x77/0x1f80 [ 502.120330][ T3557] kasan_report+0x136/0x160 [ 502.124821][ T3557] ? __lock_acquire+0x77/0x1f80 [ 502.129662][ T3557] __lock_acquire+0x77/0x1f80 [ 502.134332][ T3557] ? __lock_acquire+0x125b/0x1f80 [ 502.139348][ T3557] lock_acquire+0x1f8/0x5a0 [ 502.143839][ T3557] ? lock_sock_nested+0x66/0x100 [ 502.148852][ T3557] ? lockdep_softirqs_on+0x590/0x590 [ 502.154124][ T3557] ? read_lock_is_recursive+0x10/0x10 [ 502.159484][ T3557] ? __local_bh_disable_ip+0x183/0x210 [ 502.164929][ T3557] ? __might_sleep+0xb0/0xb0 [ 502.169504][ T3557] ? lock_sock_nested+0x66/0x100 [ 502.174431][ T3557] ? __bpf_trace_softirq+0x10/0x10 [ 502.179530][ T3557] ? do_raw_read_unlock+0x38/0x70 [ 502.184566][ T3557] ? _raw_read_unlock+0x24/0x40 [ 502.189414][ T3557] ? l2cap_global_chan_by_psm+0x459/0x4c0 [ 502.195121][ T3557] ? lock_sock_nested+0x66/0x100 [ 502.200046][ T3557] _raw_spin_lock_bh+0x31/0x40 [ 502.204800][ T3557] ? lock_sock_nested+0x66/0x100 [ 502.209725][ T3557] lock_sock_nested+0x66/0x100 [ 502.214479][ T3557] l2cap_sock_recv_cb+0x51/0x4e0 [ 502.219405][ T3557] ? l2cap_recv_frame+0x123d/0x8b80 [ 502.224590][ T3557] l2cap_recv_frame+0x12b5/0x8b80 [ 502.229610][ T3557] ? l2cap_conn_unreliable+0x1a0/0x1a0 [ 502.235056][ T3557] ? __mutex_unlock_slowpath+0x218/0x750 [ 502.240674][ T3557] ? __lock_acquire+0x1f80/0x1f80 [ 502.245689][ T3557] ? mutex_unlock+0x10/0x10 [ 502.250193][ T3557] ? hci_conn_enter_active_mode+0x25c/0x360 [ 502.256106][ T3557] ? l2cap_recv_acldata+0x2ed/0x1570 [ 502.261411][ T3557] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 502.267397][ T3557] hci_rx_work+0x363/0xce0 [ 502.271823][ T3557] ? process_one_work+0x7a9/0x11d0 [ 502.276946][ T3557] process_one_work+0x8a9/0x11d0 [ 502.281903][ T3557] ? worker_detach_from_pool+0x260/0x260 [ 502.287548][ T3557] ? _raw_spin_lock_irqsave+0x120/0x120 [ 502.293109][ T3557] ? kthread_data+0x4e/0xc0 [ 502.297641][ T3557] ? wq_worker_running+0x97/0x190 [ 502.302708][ T3557] worker_thread+0xa47/0x1200 [ 502.307394][ T3557] ? __sched_text_start+0x8/0x8 [ 502.312271][ T3557] kthread+0x28d/0x320 [ 502.316337][ T3557] ? worker_clr_flags+0x190/0x190 [ 502.321389][ T3557] ? kthread_blkcg+0xd0/0xd0 [ 502.325992][ T3557] ret_from_fork+0x1f/0x30 [ 502.330427][ T3557] [ 502.333446][ T3557] [ 502.335751][ T3557] Allocated by task 20254: [ 502.340173][ T3557] kasan_set_track+0x4b/0x70 [ 502.344780][ T3557] __kasan_kmalloc+0x97/0xb0 [ 502.349357][ T3557] __kmalloc+0xb2/0x230 [ 502.353530][ T3557] sk_prot_alloc+0xe0/0x200 [ 502.358039][ T3557] sk_alloc+0x36/0x350 [ 502.362113][ T3557] bt_sock_alloc+0x37/0x130 [ 502.366632][ T3557] l2cap_sock_create+0x11e/0x2b0 [ 502.371584][ T3557] bt_sock_create+0x159/0x220 [ 502.376289][ T3557] __sock_create+0x488/0x910 [ 502.380894][ T3557] __sys_socket+0x136/0x3a0 [ 502.385411][ T3557] __x64_sys_socket+0x76/0x80 [ 502.390109][ T3557] do_syscall_64+0x3b/0xb0 [ 502.394539][ T3557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.400420][ T3557] [ 502.402724][ T3557] Freed by task 20253: [ 502.406770][ T3557] kasan_set_track+0x4b/0x70 [ 502.411604][ T3557] kasan_save_free_info+0x27/0x40 [ 502.416609][ T3557] ____kasan_slab_free+0xd6/0x120 [ 502.421620][ T3557] __kmem_cache_free+0x25c/0x3c0 [ 502.426538][ T3557] __sk_destruct+0x473/0x5f0 [ 502.431111][ T3557] l2cap_sock_release+0x157/0x1d0 [ 502.436207][ T3557] sock_close+0xcd/0x230 [ 502.440431][ T3557] __fput+0x3f6/0x8d0 [ 502.444394][ T3557] task_work_run+0x246/0x300 [ 502.449054][ T3557] exit_to_user_mode_loop+0xde/0x100 [ 502.454329][ T3557] exit_to_user_mode_prepare+0xb1/0x140 [ 502.459856][ T3557] syscall_exit_to_user_mode+0x60/0x270 [ 502.465384][ T3557] do_syscall_64+0x47/0xb0 [ 502.469784][ T3557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.475661][ T3557] [ 502.477964][ T3557] Last potentially related work creation: [ 502.483657][ T3557] kasan_save_stack+0x3b/0x60 [ 502.488321][ T3557] __kasan_record_aux_stack+0xb0/0xc0 [ 502.493672][ T3557] call_rcu+0x163/0xa10 [ 502.497814][ T3557] netlink_release+0x1554/0x19e0 [ 502.502738][ T3557] sock_release+0x7a/0x140 [ 502.507140][ T3557] rdma_dev_exit_net+0x2aa/0x350 [ 502.512065][ T3557] cleanup_net+0x6ce/0xb60 [ 502.516468][ T3557] process_one_work+0x8a9/0x11d0 [ 502.521386][ T3557] worker_thread+0xa47/0x1200 [ 502.526043][ T3557] kthread+0x28d/0x320 [ 502.530091][ T3557] ret_from_fork+0x1f/0x30 [ 502.534494][ T3557] [ 502.536798][ T3557] Second to last potentially related work creation: [ 502.543357][ T3557] kasan_save_stack+0x3b/0x60 [ 502.548053][ T3557] __kasan_record_aux_stack+0xb0/0xc0 [ 502.553406][ T3557] insert_work+0x54/0x3d0 [ 502.557718][ T3557] __queue_work+0xb4b/0xf90 [ 502.562201][ T3557] queue_work_on+0x14b/0x250 [ 502.566772][ T3557] afs_purge_servers+0x145/0x370 [ 502.571694][ T3557] afs_net_exit+0x50/0xa0 [ 502.576005][ T3557] cleanup_net+0x6ce/0xb60 [ 502.580406][ T3557] process_one_work+0x8a9/0x11d0 [ 502.585326][ T3557] worker_thread+0xa47/0x1200 [ 502.590000][ T3557] kthread+0x28d/0x320 [ 502.594071][ T3557] ret_from_fork+0x1f/0x30 [ 502.598485][ T3557] [ 502.600794][ T3557] The buggy address belongs to the object at ffff888058c32000 [ 502.600794][ T3557] which belongs to the cache kmalloc-2k of size 2048 [ 502.614834][ T3557] The buggy address is located 176 bytes inside of [ 502.614834][ T3557] 2048-byte region [ffff888058c32000, ffff888058c32800) [ 502.628185][ T3557] [ 502.630492][ T3557] The buggy address belongs to the physical page: [ 502.636893][ T3557] page:ffffea0001630c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58c30 [ 502.647025][ T3557] head:ffffea0001630c00 order:3 compound_mapcount:0 compound_pincount:0 [ 502.655328][ T3557] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 502.663299][ T3557] raw: 00fff00000010200 ffffea000084ba00 dead000000000002 ffff888012442000 [ 502.671864][ T3557] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 502.680431][ T3557] page dumped because: kasan: bad access detected [ 502.686828][ T3557] page_owner tracks the page as allocated [ 502.692520][ T3557] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3553, tgid 3553 (syz-executor), ts 60219387982, free_ts 10693370342 [ 502.714651][ T3557] post_alloc_hook+0x18d/0x1b0 [ 502.719410][ T3557] get_page_from_freelist+0x322e/0x33b0 [ 502.724944][ T3557] __alloc_pages+0x28d/0x770 [ 502.729530][ T3557] alloc_slab_page+0x6a/0x150 [ 502.734194][ T3557] new_slab+0x84/0x2d0 [ 502.738251][ T3557] ___slab_alloc+0xc20/0x1270 [ 502.742915][ T3557] __kmem_cache_alloc_node+0x19f/0x260 [ 502.748358][ T3557] __kmalloc_node_track_caller+0xa0/0x220 [ 502.754064][ T3557] __alloc_skb+0x135/0x670 [ 502.758470][ T3557] inet6_ifinfo_notify+0x69/0x110 [ 502.763476][ T3557] addrconf_notify+0xc56/0xf60 [ 502.768226][ T3557] raw_notifier_call_chain+0xd0/0x170 [ 502.773604][ T3557] __dev_notify_flags+0x304/0x610 [ 502.778632][ T3557] dev_change_flags+0xe7/0x190 [ 502.783395][ T3557] do_setlink+0xcf4/0x3de0 [ 502.787797][ T3557] rtnl_newlink+0x172c/0x2050 [ 502.792465][ T3557] page last free stack trace: [ 502.797116][ T3557] free_unref_page_prepare+0xf63/0x1120 [ 502.802645][ T3557] free_unref_page+0x33/0x3e0 [ 502.807322][ T3557] free_contig_range+0x9a/0x150 [ 502.812167][ T3557] destroy_args+0xfe/0x997 [ 502.816576][ T3557] debug_vm_pgtable+0x416/0x46b [ 502.821413][ T3557] do_one_initcall+0x265/0x8f0 [ 502.826185][ T3557] do_initcall_level+0x157/0x207 [ 502.831109][ T3557] do_initcalls+0x49/0x86 [ 502.835423][ T3557] kernel_init_freeable+0x45c/0x60f [ 502.840604][ T3557] kernel_init+0x19/0x290 [ 502.844920][ T3557] ret_from_fork+0x1f/0x30 [ 502.849323][ T3557] [ 502.851645][ T3557] Memory state around the buggy address: [ 502.857271][ T3557] ffff888058c31f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.865337][ T3557] ffff888058c32000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.873390][ T3557] >ffff888058c32080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.881434][ T3557] ^ [ 502.887063][ T3557] ffff888058c32100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.895123][ T3557] ffff888058c32180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.903272][ T3557] ================================================================== [ 502.911322][ T3557] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 502.918524][ T3557] CPU: 0 PID: 3557 Comm: kworker/u5:4 Not tainted 6.1.100-syzkaller #0 [ 502.926752][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 502.936793][ T3557] Workqueue: hci1 hci_rx_work [ 502.941461][ T3557] Call Trace: [ 502.944726][ T3557] [ 502.947641][ T3557] dump_stack_lvl+0x1e3/0x2cb [ 502.952311][ T3557] ? nf_tcp_handle_invalid+0x642/0x642 [ 502.957761][ T3557] ? panic+0x764/0x764 [ 502.961820][ T3557] ? lock_release+0xd6/0xa20 [ 502.966403][ T3557] ? vscnprintf+0x59/0x80 [ 502.970805][ T3557] panic+0x318/0x764 [ 502.974687][ T3557] ? check_panic_on_warn+0x1d/0xa0 [ 502.979783][ T3557] ? memcpy_page_flushcache+0xfc/0xfc [ 502.985141][ T3557] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 502.991021][ T3557] ? _raw_spin_unlock+0x40/0x40 [ 502.995855][ T3557] ? print_report+0x4a3/0x4f0 [ 503.000789][ T3557] check_panic_on_warn+0x7e/0xa0 [ 503.005799][ T3557] ? __lock_acquire+0x77/0x1f80 [ 503.010636][ T3557] end_report+0x66/0x110 [ 503.014860][ T3557] kasan_report+0x143/0x160 [ 503.019343][ T3557] ? __lock_acquire+0x77/0x1f80 [ 503.024180][ T3557] __lock_acquire+0x77/0x1f80 [ 503.028849][ T3557] ? __lock_acquire+0x125b/0x1f80 [ 503.033862][ T3557] lock_acquire+0x1f8/0x5a0 [ 503.038349][ T3557] ? lock_sock_nested+0x66/0x100 [ 503.043272][ T3557] ? lockdep_softirqs_on+0x590/0x590 [ 503.048544][ T3557] ? read_lock_is_recursive+0x10/0x10 [ 503.053902][ T3557] ? __local_bh_disable_ip+0x183/0x210 [ 503.059350][ T3557] ? __might_sleep+0xb0/0xb0 [ 503.063926][ T3557] ? lock_sock_nested+0x66/0x100 [ 503.068848][ T3557] ? __bpf_trace_softirq+0x10/0x10 [ 503.073948][ T3557] ? do_raw_read_unlock+0x38/0x70 [ 503.078956][ T3557] ? _raw_read_unlock+0x24/0x40 [ 503.083817][ T3557] ? l2cap_global_chan_by_psm+0x459/0x4c0 [ 503.089521][ T3557] ? lock_sock_nested+0x66/0x100 [ 503.094447][ T3557] _raw_spin_lock_bh+0x31/0x40 [ 503.099199][ T3557] ? lock_sock_nested+0x66/0x100 [ 503.104121][ T3557] lock_sock_nested+0x66/0x100 [ 503.108874][ T3557] l2cap_sock_recv_cb+0x51/0x4e0 [ 503.113798][ T3557] ? l2cap_recv_frame+0x123d/0x8b80 [ 503.118982][ T3557] l2cap_recv_frame+0x12b5/0x8b80 [ 503.123997][ T3557] ? l2cap_conn_unreliable+0x1a0/0x1a0 [ 503.129438][ T3557] ? __mutex_unlock_slowpath+0x218/0x750 [ 503.135227][ T3557] ? __lock_acquire+0x1f80/0x1f80 [ 503.140238][ T3557] ? mutex_unlock+0x10/0x10 [ 503.144812][ T3557] ? hci_conn_enter_active_mode+0x25c/0x360 [ 503.150690][ T3557] ? l2cap_recv_acldata+0x2ed/0x1570 [ 503.155982][ T3557] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 503.161948][ T3557] hci_rx_work+0x363/0xce0 [ 503.166350][ T3557] ? process_one_work+0x7a9/0x11d0 [ 503.171447][ T3557] process_one_work+0x8a9/0x11d0 [ 503.176383][ T3557] ? worker_detach_from_pool+0x260/0x260 [ 503.182001][ T3557] ? _raw_spin_lock_irqsave+0x120/0x120 [ 503.187532][ T3557] ? kthread_data+0x4e/0xc0 [ 503.192024][ T3557] ? wq_worker_running+0x97/0x190 [ 503.197037][ T3557] worker_thread+0xa47/0x1200 [ 503.201701][ T3557] ? __sched_text_start+0x8/0x8 [ 503.206547][ T3557] kthread+0x28d/0x320 [ 503.210597][ T3557] ? worker_clr_flags+0x190/0x190 [ 503.215603][ T3557] ? kthread_blkcg+0xd0/0xd0 [ 503.220260][ T3557] ret_from_fork+0x1f/0x30 [ 503.224667][ T3557] [ 503.227982][ T3557] Kernel Offset: disabled [ 503.232289][ T3557] Rebooting in 86400 seconds..