last executing test programs: 4.330483588s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x400) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$caif_seqpacket(0x25, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.308769081s ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = dup(r3) r5 = fcntl$dupfd(r2, 0x0, r3) preadv(r5, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = fcntl$dupfd(r5, 0x0, r0) preadv(r6, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 4.290589224s ago: executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffeffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) 4.25019349s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000340)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000d80ffff", 0x8) 4.131038478s ago: executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 4.088366795s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000380)=""/144}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r3 = gettid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r5, r6, 0x0, 0x3}, 0x48) 3.375792944s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3.311115114s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) 3.147684839s ago: executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffeffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) 3.130486231s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, 0x0}) 3.105194725s ago: executing program 3: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 2.329390344s ago: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, 0x0, 0x0) 2.294374939s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioprio_set$pid(0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r3, 0x0) 2.118322716s ago: executing program 0: syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0xfcb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_sys\x00', 0x26e1, 0x0) 2.076372003s ago: executing program 3: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r0, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1.314142109s ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, 0xe8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000005c0)={0x6, 'bond_slave_0\x00', {0x9}, 0x1f}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200000c4, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x20000080) 1.148990814s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 1.033751662s ago: executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4da, 0x104d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f"]}) 903.679852ms ago: executing program 0: syz_usb_connect(0x0, 0x7bd, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000017dbd120630701203964000000010902ab070404fa2000090437fd03ff279b0809050500080001053f292328774c7fca2fe4d4a59c71a980d8e563caa8595ee071a4a3f423c025d0340d1006f8d1a48edcd007"], 0x0) 784.84029ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 706.304832ms ago: executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 455.90987ms ago: executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, 0x0, 0x0) 440.878023ms ago: executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000180)={0x2}, 0x12) 406.135318ms ago: executing program 2: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='iocharset=koi8-r,umask=00000000000020000000000,iocharset=cp1251,errors=continue,discard,iocharset=macroman,errors=continue,errors=remount-ro,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp850,uid=', @ANYRESHEX=0xee00, @ANYBLOB], 0x5, 0x1514, &(0x7f0000000ac0)="$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") utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0xea60}}) 365.064974ms ago: executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 315.447981ms ago: executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FNxEAQBdC/Xi+2I1pwRkBM7CIQ7SAjRDN0QGWIyMh3sq6Duwvey+bPl0YTbup9nEo/PCZZpqQ8feZlrq0N2ZI+aWN+U87V9ec5ydyyZExqSdY9/vo4bf+67PHR7VJqkteptofLtXVre6U/5rfv634LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfpPwAA///20gvl") 80.278508ms ago: executing program 2: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, "070022eb81fff500"}}}}}, 0x0) 59.522231ms ago: executing program 4: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb"], 0x0, 0x5a}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) 42.395953ms ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@rand_addr=' \x01\x00'}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, 0xe8) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000005c0)={0x6, 'bond_slave_0\x00', {0x9}, 0x1f}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200000c4, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x20000080) 0s ago: executing program 4: socket(0x1e, 0x1, 0x0) r0 = syz_io_uring_setup(0x766e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2205}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 295.551273][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.563562][ T27] audit: type=1326 audit(1718136840.937:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd0a07cea9 code=0x0 [ 295.570241][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.607437][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.616969][ T8020] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 120ms [ 295.641280][ T8020] gfs2: fsid=syz:syz.0: jid=0: Done [ 295.648038][ T9602] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 295.655415][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.672501][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.682524][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.691933][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.724557][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.745214][ T9629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.770734][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.779374][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.796557][ T9631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.806753][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.829602][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.863901][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.904413][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 295.942305][ T7771] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 296.111913][ T9633] loop0: detected capacity change from 0 to 4096 [ 296.129905][ T9633] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 296.187733][ T9633] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 296.229829][ T9633] ntfs3: loop0: ino=21, "cpu.stat" The size of extended attributes must not exceed 64KiB [ 296.242807][ T9633] ntfs3: loop0: ino=22, "cgroup.controllers" The size of extended attributes must not exceed 64KiB [ 296.280837][ T9633] ntfs3: loop0: ino=23, "memory.swap.current" The size of extended attributes must not exceed 64KiB [ 296.317791][ T9633] ntfs3: loop0: ino=24, "memory.numa_stat" The size of extended attributes must not exceed 64KiB [ 296.391466][ T9633] ntfs3: loop0: ino=25, "memory.events" The size of extended attributes must not exceed 64KiB [ 296.532859][ T9633] ntfs3: loop0: ino=26, "blkio.bfq.io_service_time_recursive" The size of extended attributes must not exceed 64KiB [ 296.581834][ T8026] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 296.615462][ T9633] ntfs3: loop0: ino=27, "cpuset.effective_cpus" The size of extended attributes must not exceed 64KiB [ 296.645628][ T9642] ntfs3: loop0: ino=28, "rdma.current" The size of extended attributes must not exceed 64KiB [ 297.160348][ T8026] usb 4-1: Using ep0 maxpacket: 32 [ 297.689995][ T8026] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 297.983738][ T9651] loop1: detected capacity change from 0 to 64 [ 298.170542][ T8026] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 298.238326][ T8026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.510565][ T8026] usb 4-1: Product: syz [ 298.514762][ T8026] usb 4-1: Manufacturer: syz [ 298.519355][ T8026] usb 4-1: SerialNumber: syz [ 298.541525][ T8026] usb 4-1: config 0 descriptor?? [ 298.560174][ T9637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.580579][ T8026] hub 4-1:0.0: bad descriptor, ignoring hub [ 298.605882][ T8026] hub: probe of 4-1:0.0 failed with error -5 [ 298.625203][ T8026] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 298.679763][ T9658] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.755815][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.959946][ T6577] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 299.286161][ T3575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.299145][ T3575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.307236][ T3575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.315096][ T3575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.325319][ T3575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.332814][ T3575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.340020][ T6577] usb 3-1: Using ep0 maxpacket: 8 [ 299.458804][ T9667] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved [ 299.475487][ T6577] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.495209][ T6577] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.671511][ T6577] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 299.691266][ T6577] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 299.699539][ T6577] usb 3-1: Product: syz [ 299.737278][ T6577] usb 3-1: SerialNumber: syz [ 299.745129][ T9677] loop0: detected capacity change from 0 to 16 [ 299.757273][ T6577] usb 3-1: config 0 descriptor?? [ 299.770695][ T9677] erofs: (device loop0): mounted with root inode @ nid 36. [ 299.829341][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.857273][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.873124][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 299.887367][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.897055][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.919757][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.936915][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.946187][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.954955][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.964445][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.973516][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.982280][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 299.995771][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.005017][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.013943][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.022819][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.031597][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.042712][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.056498][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.065329][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.074114][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.082714][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.091399][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.099962][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.109155][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.118999][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.127612][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.128231][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.136291][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.149056][ T9682] loop1: detected capacity change from 0 to 4096 [ 300.152018][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.166362][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.175094][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.183903][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.192248][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.200159][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.209957][ T9664] device bridge_slave_0 entered promiscuous mode [ 300.217359][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.236468][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.244364][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.244439][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.261197][ T9664] device bridge_slave_1 entered promiscuous mode [ 300.272032][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.292094][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.300826][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.303901][ T9682] ntfs3: loop1: failed to convert "0000" to iso8859-7 [ 300.309644][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.321802][ T9682] ntfs3: loop1: failed to convert name for inode 1e. [ 300.330885][ T8026] usb 3-1: USB disconnect, device number 13 [ 300.339031][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.351590][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.360515][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.369217][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.383327][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.388692][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.401843][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.417448][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.433294][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.442163][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.451088][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.463601][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.472908][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.483023][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.494219][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.515141][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.530491][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.543694][ T9664] team0: Port device team_slave_0 added [ 300.544310][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.552069][ T9664] team0: Port device team_slave_1 added [ 300.564756][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.574912][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.599600][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.611399][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.618345][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.627400][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.644433][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.664238][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.674181][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.689402][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.697975][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.698162][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.707278][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.720817][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.739676][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.761963][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.770766][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.784858][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.810678][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.825776][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.838836][ T9664] device hsr_slave_0 entered promiscuous mode [ 300.845747][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.855050][ T9664] device hsr_slave_1 entered promiscuous mode [ 300.864158][ T7] usb 4-1: USB disconnect, device number 15 [ 300.869954][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 300.874725][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.888663][ T9664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.899720][ T9664] Cannot create hsr debugfs directory [ 300.920752][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.929386][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.946371][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.968655][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 300.969774][ T9696] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved [ 300.977575][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.022239][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.051880][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.084334][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.121768][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.139257][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.157384][ T9702] tmpfs: Bad value for 'mpol' [ 301.163241][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.191560][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.211234][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.251300][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.280313][ T9664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.291974][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.300705][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.316703][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.336907][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.355875][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.371226][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.390129][ T3575] Bluetooth: hci1: command tx timeout [ 301.390236][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.417367][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.426834][ T9705] device syzkaller0 entered promiscuous mode [ 301.433600][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.447046][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.490641][ T9664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.516306][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.558270][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.588132][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.612311][ T9697] loop3: detected capacity change from 0 to 32768 [ 301.616123][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.623388][ T9697] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 301.635837][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.644280][ T9697] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 301.649595][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.661866][ T9697] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 301.677237][ T4485] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 301.682371][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.692045][ T4485] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 301.703884][ T9664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.732821][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.757589][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.773074][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.797320][ T4485] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 105ms [ 301.806071][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.827129][ T4485] gfs2: fsid=syz:syz.0: jid=0: Done [ 301.828346][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.835456][ T9697] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 301.846680][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.858538][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.912890][ T9664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.924125][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.955959][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.978192][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.018803][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.066817][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.134855][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.151566][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.180819][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.210939][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.251402][ T9664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.259098][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.270377][ T9664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.278062][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.288851][ T9664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.296262][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.305479][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.313610][ T4485] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 302.329942][ T9664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 302.343364][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.356451][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.367648][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.880395][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 302.910365][ T4485] usb 3-1: Using ep0 maxpacket: 32 [ 303.016075][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.025067][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.060485][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.099716][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.166214][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.197446][ T9730] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved [ 303.210079][ T4485] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 303.220843][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.230058][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.252286][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.270659][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.279290][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.317914][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.320530][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.339227][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.347537][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.370091][ T9664] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.376247][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.388126][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.406801][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.408488][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.434921][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.435772][ T4485] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 303.442045][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.459244][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.470917][ T3575] Bluetooth: hci1: command tx timeout [ 303.477849][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.490011][ T4485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.507080][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.520015][ T4485] usb 3-1: Product: syz [ 303.524184][ T4485] usb 3-1: Manufacturer: syz [ 303.528781][ T4485] usb 3-1: SerialNumber: syz [ 303.534286][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.550657][ T4485] usb 3-1: config 0 descriptor?? [ 303.562602][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.580234][ T9721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.581551][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.599774][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.610524][ T4485] hub 3-1:0.0: bad descriptor, ignoring hub [ 303.616499][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.619898][ T4485] hub: probe of 3-1:0.0 failed with error -5 [ 303.625527][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.639972][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.649146][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.650503][ T4485] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 303.658249][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.690552][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.697678][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.725766][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.734809][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.780761][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.789467][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.795305][ T9664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.811058][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.831308][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.861479][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.879718][ T9664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.892782][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.902890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.912832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.921807][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.937783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.946658][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.956562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.965503][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.974427][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.983150][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 303.991918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.000642][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.009147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.017690][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.026537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.035973][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.044692][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.054123][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.073598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.074709][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.109082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.130799][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.139466][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.164243][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.201454][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.202494][ T9751] loop1: detected capacity change from 0 to 512 [ 304.237253][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.246277][ T9751] EXT4-fs: Ignoring removed orlov option [ 304.258944][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.271373][ T9751] EXT4-fs: journaled quota format not specified [ 304.287607][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.382990][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.397425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.409778][ T9664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.418495][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.454299][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.463074][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.472361][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.481797][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.492459][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.511911][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 304.548461][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.057270][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.261682][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.280043][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.324213][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.386956][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.428549][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.458674][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.492652][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.508023][ T3626] usb 3-1: USB disconnect, device number 14 [ 305.546521][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.560243][ T3575] Bluetooth: hci1: command tx timeout [ 305.592487][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.610288][ T9774] tmpfs: Bad value for 'mpol' [ 305.640939][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.682549][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.730615][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.739291][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.792514][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.817159][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.840690][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.877150][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.886699][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.887958][ T27] audit: type=1326 audit(1718136851.257:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a27cea9 code=0x7ffc0000 [ 305.919045][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.929600][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.974877][ T9664] device veth0_vlan entered promiscuous mode [ 305.981849][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 305.992978][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.003317][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.010000][ T27] audit: type=1326 audit(1718136851.307:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7a27cea9 code=0x7ffc0000 [ 306.020786][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.044215][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.060745][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.075243][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.094230][ T9664] device veth1_vlan entered promiscuous mode [ 306.115878][ T27] audit: type=1326 audit(1718136851.307:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a27cea9 code=0x7ffc0000 [ 306.161501][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.184868][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.245529][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.264612][ T27] audit: type=1326 audit(1718136851.307:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7a27cea9 code=0x7ffc0000 [ 306.302105][ T27] audit: type=1326 audit(1718136851.317:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a27cea9 code=0x7ffc0000 [ 306.327210][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.335327][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.353521][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.373502][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.530610][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.582885][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.658449][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.696603][ T27] audit: type=1326 audit(1718136851.317:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde7a27a627 code=0x7ffc0000 [ 306.831797][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 306.988381][ T27] audit: type=1326 audit(1718136851.317:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde7a2402e9 code=0x7ffc0000 [ 307.015372][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.016884][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.033943][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.043389][ T9664] device veth0_macvtap entered promiscuous mode [ 307.063939][ T27] audit: type=1326 audit(1718136851.317:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7a27cea9 code=0x7ffc0000 [ 307.087892][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.109403][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.120649][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.129295][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.180721][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.189365][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.217744][ T27] audit: type=1326 audit(1718136851.317:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde7a27a627 code=0x7ffc0000 [ 307.223508][ T9664] device veth1_macvtap entered promiscuous mode [ 307.240549][ T27] audit: type=1326 audit(1718136851.327:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde7a2402e9 code=0x7ffc0000 [ 307.271351][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.281766][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.290515][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.300723][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.309711][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.321471][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.331094][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.339826][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.350546][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.360001][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.368621][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.378761][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.396637][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.411942][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.429567][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.431891][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.476517][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.489099][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.499094][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.501942][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.514306][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.528548][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.544058][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.554193][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.559505][ T8296] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 307.568915][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.584758][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.600491][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.623181][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.639566][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.640127][ T3575] Bluetooth: hci1: command tx timeout [ 307.653233][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.663059][ T9818] tmpfs: Bad value for 'mpol' [ 307.664923][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.679385][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.690469][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.701133][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.711260][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.721999][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.740469][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.751051][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.762194][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.772752][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.775522][ T6578] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 307.783978][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.797794][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.807010][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.818142][ T9664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.829366][ T9664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.844847][ T9664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.854763][ T9664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.042555][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.059828][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.070862][ T6578] usb 3-1: Using ep0 maxpacket: 32 [ 308.113984][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.153263][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.190142][ T6578] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 308.205861][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.225409][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.370293][ T6578] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 308.379366][ T6578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.412944][ T6578] usb 3-1: Product: syz [ 308.417124][ T6578] usb 3-1: Manufacturer: syz [ 308.439518][ T6578] usb 3-1: SerialNumber: syz [ 308.456267][ T6578] usb 3-1: config 0 descriptor?? [ 308.491473][ T9810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.515242][ T9853] loop3: detected capacity change from 0 to 512 [ 308.546151][ T9853] EXT4-fs: Ignoring removed orlov option [ 308.570097][ T9853] EXT4-fs: journaled quota format not specified [ 308.710088][ T6578] usb 3-1: can't set config #0, error -71 [ 308.727818][ T6578] usb 3-1: USB disconnect, device number 15 [ 309.187590][ T9890] sock: sock_set_timeout: `syz-executor.3' (pid 9890) tries to set negative timeout [ 309.224750][ T3570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.237872][ T3570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.255751][ T3570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.263772][ T3570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.273233][ T3570] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 309.280602][ T3570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.668630][ T9892] chnl_net:caif_netlink_parms(): no params data found [ 310.007198][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.067341][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.104901][ T9892] device bridge_slave_0 entered promiscuous mode [ 310.141582][ T9934] sock: sock_set_timeout: `syz-executor.3' (pid 9934) tries to set negative timeout [ 310.141835][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.169164][ T9932] 9pnet_fd: Insufficient options for proto=fd [ 310.199368][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.218088][ T9892] device bridge_slave_1 entered promiscuous mode [ 310.278177][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.318249][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.440524][ T6578] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 310.440998][ T9892] team0: Port device team_slave_0 added [ 310.493290][ T9892] team0: Port device team_slave_1 added [ 310.569627][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.588092][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.666277][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.690063][ T6578] usb 2-1: Using ep0 maxpacket: 32 [ 310.699777][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.723916][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.786371][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.810159][ T6578] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 310.885725][ T9892] device hsr_slave_0 entered promiscuous mode [ 310.921644][ T9892] device hsr_slave_1 entered promiscuous mode [ 310.935395][ T9892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.944395][ T9892] Cannot create hsr debugfs directory [ 311.000405][ T6578] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 311.015789][ T6578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.023956][ T6578] usb 2-1: Product: syz [ 311.028128][ T6578] usb 2-1: Manufacturer: syz [ 311.037156][ T6578] usb 2-1: SerialNumber: syz [ 311.061778][ T6578] usb 2-1: config 0 descriptor?? [ 311.090400][ T9936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.110516][ T6578] hub 2-1:0.0: bad descriptor, ignoring hub [ 311.118903][ T6578] hub: probe of 2-1:0.0 failed with error -5 [ 311.141744][ T6578] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 311.250058][ T4485] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.316268][ T9892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.322532][ T3570] Bluetooth: hci4: command tx timeout [ 311.350373][ T9968] sock: sock_set_timeout: `syz-executor.4' (pid 9968) tries to set negative timeout [ 311.455039][ T9892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.518760][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 311.541354][ T4485] usb 3-1: Using ep0 maxpacket: 8 [ 311.547010][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 311.571970][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 311.602271][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 311.622252][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 311.631764][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 311.651029][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 311.700516][ T4485] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.711507][ T4485] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.712931][ T9892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.825308][ T9892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.847663][ T4485] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 311.863568][ T4485] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 311.885951][ T4485] usb 3-1: Product: syz [ 311.899976][ T4485] usb 3-1: SerialNumber: syz [ 311.906487][ T4485] usb 3-1: config 0 descriptor?? [ 312.067847][ T9892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.092617][ T9892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.118682][ T9892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.151340][ T9892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.186514][ T9980] 9pnet_fd: Insufficient options for proto=fd [ 312.379440][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.423904][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.437946][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.467227][ T9892] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.483469][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.496163][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.515399][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.522521][ T8026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.557334][ T3626] usb 3-1: USB disconnect, device number 16 [ 312.569526][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.584818][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.598410][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.618426][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.625602][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.655496][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.674619][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.706531][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.718561][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.751221][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.787251][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.836985][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.880590][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.889222][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.911383][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.928991][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.968110][ T9892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.163856][ T3333] usb 2-1: USB disconnect, device number 18 [ 313.169896][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 313.495914][ T3570] Bluetooth: hci4: command tx timeout [ 314.607702][ T40] device hsr_slave_0 left promiscuous mode [ 314.642763][ T40] device hsr_slave_1 left promiscuous mode [ 314.658778][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.689971][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.717711][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.738715][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.766425][ T40] device bridge_slave_1 left promiscuous mode [ 314.778602][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.798661][ T3575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.810184][ T3575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.829243][ T3575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.838089][ T3575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.849407][ T40] device bridge_slave_0 left promiscuous mode [ 314.855838][ T3577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.863843][ T3577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.906243][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.957809][ T40] device veth1_macvtap left promiscuous mode [ 314.965507][ T40] device veth0_macvtap left promiscuous mode [ 314.972235][ T40] device veth1_vlan left promiscuous mode [ 314.978186][ T40] device veth0_vlan left promiscuous mode [ 314.998829][T10041] 9pnet_fd: Insufficient options for proto=fd [ 315.123234][ T8026] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 315.163985][ T40] bond1 (unregistering): Released all slaves [ 315.399227][ T40] team0 (unregistering): Port device team_slave_1 removed [ 315.407109][ T8026] usb 4-1: Using ep0 maxpacket: 32 [ 315.432675][ T40] team0 (unregistering): Port device team_slave_0 removed [ 315.449473][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.464777][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.540672][ T40] bond0 (unregistering): Released all slaves [ 315.550080][ T3570] Bluetooth: hci4: command tx timeout [ 315.580267][ T8026] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 315.688100][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.696493][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.725423][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.780746][ T8026] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 315.789813][ T8026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.794060][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.807813][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.811764][ T8026] usb 4-1: Product: syz [ 315.843174][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.852722][ T8026] usb 4-1: Manufacturer: syz [ 315.854118][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.857315][ T8026] usb 4-1: SerialNumber: syz [ 315.877008][ T9892] device veth0_vlan entered promiscuous mode [ 315.892302][ T8026] usb 4-1: config 0 descriptor?? [ 315.901915][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.914327][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.937809][T10043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.950454][ T8026] hub 4-1:0.0: bad descriptor, ignoring hub [ 315.957765][ T8026] hub: probe of 4-1:0.0 failed with error -5 [ 315.966944][ T9892] device veth1_vlan entered promiscuous mode [ 315.975239][ T8026] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39 [ 316.018525][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.027252][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.035876][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.044620][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.055283][ T9892] device veth0_macvtap entered promiscuous mode [ 316.067412][ T9892] device veth1_macvtap entered promiscuous mode [ 316.085525][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.102917][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.114098][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.124603][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.134586][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.145092][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.155416][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.165926][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.176519][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.187033][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.203760][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.216594][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.227229][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.237338][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.247804][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.257722][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.268161][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.278822][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.309979][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.329268][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.341669][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.353790][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.364186][T10038] chnl_net:caif_netlink_parms(): no params data found [ 316.402074][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.416825][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.430639][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.439049][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.451781][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.462033][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.473087][ T9892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.490224][ T9892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.499005][ T9892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.508205][ T9892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.609800][T10074] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 316.640802][T10068] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 316.718960][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.746058][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.764750][T10038] device bridge_slave_0 entered promiscuous mode [ 316.809379][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.832480][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.848686][T10038] device bridge_slave_1 entered promiscuous mode [ 316.906694][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.917656][ T3570] Bluetooth: hci0: command tx timeout [ 316.917990][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.929643][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.966217][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.996221][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.007463][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.127242][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 317.164963][T10038] team0: Port device team_slave_0 added [ 317.180506][ T4192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.200922][T10038] team0: Port device team_slave_1 added [ 317.211341][ T4192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.323795][T10085] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.359813][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.368283][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.377630][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.432939][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.465789][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.514248][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.592270][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.630182][ T3570] Bluetooth: hci4: command tx timeout [ 317.840119][T10038] device hsr_slave_0 entered promiscuous mode [ 317.860221][T10038] device hsr_slave_1 entered promiscuous mode [ 317.866898][ T22] usb 4-1: USB disconnect, device number 16 [ 317.872966][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 317.895480][T10038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.920035][T10038] Cannot create hsr debugfs directory [ 318.050379][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 318.075123][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 318.100836][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 318.136603][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 318.192150][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 318.213339][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 318.241779][T10108] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 318.460828][T10109] 9pnet_fd: Insufficient options for proto=fd [ 318.616702][T10099] loop4: detected capacity change from 0 to 32768 [ 318.625127][T10038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.650436][T10113] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.688739][T10099] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (10099) [ 318.736678][T10099] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 318.760622][T10038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.793746][T10100] loop0: detected capacity change from 0 to 32768 [ 318.807100][T10099] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 318.831660][T10100] XFS: attr2 mount option is deprecated. [ 318.837821][T10099] BTRFS info (device loop4): doing ref verification [ 318.853855][T10100] XFS: noikeep mount option is deprecated. [ 318.866602][T10099] BTRFS info (device loop4): enabling ssd optimizations [ 318.886611][T10099] BTRFS info (device loop4): max_inline at 4096 [ 318.895209][T10099] BTRFS info (device loop4): max_inline at 3 [ 318.944068][T10038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.960151][T10099] BTRFS info (device loop4): not using ssd optimizations [ 318.973229][T10099] BTRFS info (device loop4): using free space tree [ 318.990254][ T3570] Bluetooth: hci0: command tx timeout [ 319.005091][T10100] XFS (loop0): Mounting V5 Filesystem [ 319.067841][T10038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.111415][T10100] XFS (loop0): Ending clean mount [ 319.131121][T10100] XFS (loop0): Quotacheck needed: Please wait. [ 319.224623][T10100] XFS (loop0): Quotacheck: Done. [ 319.417414][T10038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.432104][ T9664] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.444040][ T9892] XFS (loop0): Unmounting Filesystem [ 319.462674][T10038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.481378][T10038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.534763][T10038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.952160][T10038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.976752][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.990564][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.012082][T10038] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.070893][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 320.108642][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 320.132073][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 320.139774][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 320.170486][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 320.178496][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 320.196745][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 320.231416][T10163] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.242239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.258500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.267544][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.274681][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.353408][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.368284][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.383183][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.394819][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.401905][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.412986][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.438979][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.460836][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.491550][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.528435][T10038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.572729][T10038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.616036][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.630597][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.639514][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.648758][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.664380][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.706713][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.736496][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.797974][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.855786][T10178] 9pnet_fd: Insufficient options for proto=fd [ 321.070351][ T3570] Bluetooth: hci0: command tx timeout [ 321.177498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.193243][T10175] loop0: detected capacity change from 0 to 32768 [ 321.195887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.215740][T10175] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10175) [ 321.253740][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.269799][T10175] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.303217][T10175] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 321.303627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.327570][T10175] BTRFS info (device loop0): doing ref verification [ 321.338558][T10175] BTRFS info (device loop0): enabling ssd optimizations [ 321.347566][T10175] BTRFS info (device loop0): max_inline at 4096 [ 321.348030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.362293][T10175] BTRFS info (device loop0): max_inline at 3 [ 321.373898][T10175] BTRFS info (device loop0): not using ssd optimizations [ 321.399506][T10175] BTRFS info (device loop0): using free space tree [ 321.483448][ T40] device hsr_slave_0 left promiscuous mode [ 321.535382][ T40] device hsr_slave_1 left promiscuous mode [ 321.559033][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.588324][T10196] loop3: detected capacity change from 0 to 1024 [ 321.599910][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.630706][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.638147][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.654199][T10196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.678674][ T40] device bridge_slave_1 left promiscuous mode [ 321.697144][T10185] loop4: detected capacity change from 0 to 32768 [ 321.700075][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.717517][ T40] device bridge_slave_0 left promiscuous mode [ 321.717786][T10185] XFS: attr2 mount option is deprecated. [ 321.724178][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.734626][T10196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 321.740028][T10185] XFS: noikeep mount option is deprecated. [ 321.758190][ T40] device veth1_macvtap left promiscuous mode [ 321.779199][ T9892] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 321.797932][ T40] device veth0_macvtap left promiscuous mode [ 321.802301][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 321.802313][ T27] audit: type=1800 audit(1718136867.167:799): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 321.812130][ T40] device veth1_vlan left promiscuous mode [ 321.845442][ T40] device veth0_vlan left promiscuous mode [ 321.851521][ T27] audit: type=1804 audit(1718136867.207:800): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1884646618/syzkaller.yCQY5C/413/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 321.904197][T10185] XFS (loop4): Mounting V5 Filesystem [ 322.017725][T10185] XFS (loop4): Ending clean mount [ 322.088391][T10185] XFS (loop4): Quotacheck needed: Please wait. [ 322.089693][ T4839] EXT4-fs (loop3): unmounting filesystem. [ 322.148916][T10185] XFS (loop4): Quotacheck: Done. [ 322.341615][ T9664] XFS (loop4): Unmounting Filesystem [ 322.606107][ T40] team0 (unregistering): Port device team_slave_1 removed [ 322.652477][ T40] team0 (unregistering): Port device team_slave_0 removed [ 322.707736][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.758658][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.936949][ T40] bond0 (unregistering): Released all slaves [ 323.005805][T10229] loop0: detected capacity change from 0 to 32768 [ 323.082590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.102209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.111806][T10038] device veth0_vlan entered promiscuous mode [ 323.121307][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.149000][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.150335][ T3570] Bluetooth: hci0: command tx timeout [ 323.164610][T10038] device veth1_vlan entered promiscuous mode [ 323.215114][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.224029][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.232548][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.241509][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.255964][T10038] device veth0_macvtap entered promiscuous mode [ 323.266911][T10038] device veth1_macvtap entered promiscuous mode [ 323.284713][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.295607][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.310305][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.321794][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.333102][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.343745][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.353913][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.377198][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.387600][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 323.396006][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.406808][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.424271][T10038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.442980][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.467320][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.476166][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.492823][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.503606][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.530198][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.547956][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.575007][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.596976][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.619189][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.639949][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 323.649346][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.668735][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.685039][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.696379][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.718078][T10038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.751411][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.761813][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.776212][ T3333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.787702][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.801516][T10038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.813963][T10038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.823204][T10038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.832413][T10038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.930159][ T7] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 323.952844][ T7] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 323.965589][ T7] usb 5-1: Product: syz [ 323.969964][ T7] usb 5-1: SerialNumber: syz [ 323.988498][ T4192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.988618][ T7] usb 5-1: config 0 descriptor?? [ 324.016146][ T4192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.042805][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.064641][T10251] loop3: detected capacity change from 0 to 32768 [ 324.080677][T10251] XFS: attr2 mount option is deprecated. [ 324.083179][ T3858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.086894][T10251] XFS: noikeep mount option is deprecated. [ 324.118774][ T3858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.152079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.174415][T10251] XFS (loop3): Mounting V5 Filesystem [ 324.248305][ T27] audit: type=1326 audit(1718136869.617:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.302360][T10251] XFS (loop3): Ending clean mount [ 324.316991][ T27] audit: type=1326 audit(1718136869.617:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.320638][T10251] XFS (loop3): Quotacheck needed: Please wait. [ 324.367537][ T27] audit: type=1326 audit(1718136869.617:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.416381][ T7] usb 5-1: USB disconnect, device number 15 [ 324.450487][T10251] XFS (loop3): Quotacheck: Done. [ 324.462466][ T27] audit: type=1326 audit(1718136869.617:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.534930][ T27] audit: type=1326 audit(1718136869.617:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.622142][ T27] audit: type=1326 audit(1718136869.617:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.666845][ T4839] XFS (loop3): Unmounting Filesystem [ 324.728629][ T27] audit: type=1326 audit(1718136869.667:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88b67cea9 code=0x7ffc0000 [ 324.816648][ T27] audit: type=1326 audit(1718136869.667:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb88b67a627 code=0x7ffc0000 [ 325.088000][T10283] loop4: detected capacity change from 0 to 64 [ 325.444596][T10296] loop1: detected capacity change from 0 to 256 [ 325.671085][T10296] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 326.159760][T10315] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 1090519040 > max in inode 1961 [ 326.303636][T10320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.760072][ T3571] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 326.792390][T10325] loop1: detected capacity change from 0 to 64 [ 326.939033][ T27] kauditd_printk_skb: 98 callbacks suppressed [ 326.939047][ T27] audit: type=1804 audit(1718136872.307:907): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3390454271/syzkaller.yfu5CC/501/bus" dev="sda1" ino=1965 res=1 errno=0 [ 327.050223][ T3571] usb 4-1: Using ep0 maxpacket: 8 [ 327.190452][ T3571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.213027][ T3571] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.496360][ T3571] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 328.472620][T10329] loop0: detected capacity change from 0 to 32768 [ 328.488481][ T3571] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 328.496810][ T3571] usb 4-1: Product: syz [ 328.501084][ T3571] usb 4-1: SerialNumber: syz [ 328.518987][ T3571] usb 4-1: config 0 descriptor?? [ 329.040865][ T3617] usb 4-1: USB disconnect, device number 17 [ 329.299374][T10348] loop1: detected capacity change from 0 to 32768 [ 329.494616][T10348] XFS (loop1): Mounting V5 Filesystem [ 330.297958][T10348] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 330.332337][T10348] XFS (loop1): Starting recovery (logdev: internal) [ 330.416896][T10388] loop4: detected capacity change from 0 to 256 [ 330.553011][T10388] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 331.040033][T10348] XFS (loop1): Ending recovery (logdev: internal) [ 331.240849][ T27] audit: type=1804 audit(1718136876.607:908): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir295452130/syzkaller.BgogTE/7/file1/bus" dev="loop1" ino=4425 res=1 errno=0 [ 331.302947][ T27] audit: type=1804 audit(1718136876.677:909): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir295452130/syzkaller.BgogTE/7/file1/bus" dev="loop1" ino=4425 res=1 errno=0 [ 331.407102][T10410] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 1090519040 > max in inode 1965 [ 331.421660][T10038] XFS (loop1): Unmounting Filesystem [ 331.903196][T10421] loop4: detected capacity change from 0 to 256 [ 331.933286][T10421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 332.821209][T10413] loop0: detected capacity change from 0 to 32768 [ 332.848893][T10439] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 1090519040 > max in inode 1965 [ 332.876082][T10413] XFS (loop0): Mounting V5 Filesystem [ 332.977714][T10413] XFS (loop0): Ending clean mount [ 333.048674][ T9892] XFS (loop0): Unmounting Filesystem [ 333.150732][T10460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.233666][T10474] loop3: detected capacity change from 0 to 256 [ 334.332238][T10444] loop1: detected capacity change from 0 to 32768 [ 334.516089][T10444] XFS (loop1): Mounting V5 Filesystem [ 334.597561][T10491] loop0: detected capacity change from 0 to 256 [ 334.675895][T10491] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 336.862474][T10444] XFS (loop1): AIL initialisation failed: error -12 [ 336.950035][T10444] XFS (loop1): log mount failed [ 337.228838][T10506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.455318][T10527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.844872][T10529] loop1: detected capacity change from 0 to 256 [ 339.437447][T10529] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 339.964059][T10533] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 340.225373][T10547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.997600][T10549] loop4: detected capacity change from 0 to 64 [ 341.107248][T10549] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 341.219180][T10559] overlayfs: bad mount option "redirect_dir=./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 341.451759][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.503196][T10541] loop1: detected capacity change from 0 to 32768 [ 341.615763][T10574] loop4: detected capacity change from 0 to 256 [ 341.657680][T10574] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 341.984762][T10541] XFS (loop1): Mounting V5 Filesystem [ 342.327588][T10541] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 342.423724][T10541] XFS (loop1): Starting recovery (logdev: internal) [ 342.526149][T10541] XFS (loop1): Ending recovery (logdev: internal) [ 342.650682][ T27] audit: type=1804 audit(1718136888.027:910): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir295452130/syzkaller.BgogTE/13/file1/bus" dev="loop1" ino=4425 res=1 errno=0 [ 342.720764][ T27] audit: type=1804 audit(1718136888.077:911): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir295452130/syzkaller.BgogTE/13/file1/bus" dev="loop1" ino=4425 res=1 errno=0 [ 342.813780][T10038] XFS (loop1): Unmounting Filesystem [ 343.351262][T10611] overlayfs: bad mount option "redirect_dir=./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 344.007528][T10627] loop0: detected capacity change from 0 to 64 [ 344.212156][T10613] loop3: detected capacity change from 0 to 32768 [ 344.239457][T10627] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 344.263174][T10613] XFS (loop3): Mounting V5 Filesystem [ 344.364109][T10613] XFS (loop3): Ending clean mount [ 344.470377][ T4839] XFS (loop3): Unmounting Filesystem [ 346.311683][T10655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.724970][T10660] loop0: detected capacity change from 0 to 64 [ 346.748109][ T27] audit: type=1804 audit(1718136892.117:912): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3390454271/syzkaller.yfu5CC/526/file0" dev="sda1" ino=1952 res=1 errno=0 [ 346.758498][T10660] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 346.833026][T10666] overlayfs: bad mount option "redirect_dir=./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 346.924068][T10669] loop4: detected capacity change from 0 to 2048 [ 347.174780][T10669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.237625][T10649] loop1: detected capacity change from 0 to 40427 [ 347.272653][T10649] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 347.293911][T10649] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 347.319501][T10649] F2FS-fs (loop1): invalid crc value [ 347.349265][T10649] F2FS-fs (loop1): Found nat_bits in checkpoint [ 347.517720][ T9664] EXT4-fs (loop4): unmounting filesystem. [ 347.547843][T10649] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 347.555812][T10649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 347.715139][T10677] loop3: detected capacity change from 0 to 32768 [ 348.321577][T10677] XFS (loop3): Mounting V5 Filesystem [ 348.581122][T10677] XFS (loop3): Ending clean mount [ 348.622151][T10677] XFS (loop3): Quotacheck needed: Please wait. [ 348.694093][T10717] overlayfs: bad mount option "redirect_dir=./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 348.695005][T10677] XFS (loop3): Quotacheck: Done. [ 348.944596][T10721] tipc: Failed to remove unknown binding: 66,1,1/0:3872631104/3872631106 [ 348.970319][T10721] tipc: Failed to remove unknown binding: 66,1,1/0:3872631104/3872631106 [ 348.989362][T10721] tipc: Failed to remove unknown binding: 66,1,1/0:3872631104/3872631106 [ 349.002691][ T4839] XFS (loop3): Unmounting Filesystem [ 349.159406][T10729] loop1: detected capacity change from 0 to 2048 [ 349.222222][T10729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 349.441107][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.548050][T10038] EXT4-fs (loop1): unmounting filesystem. [ 349.709953][T10751] overlayfs: bad mount option "redirect_dir=./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 349.869286][T10731] loop4: detected capacity change from 0 to 40427 [ 350.186249][T10761] tipc: Failed to remove unknown binding: 66,1,1/0:357728262/357728264 [ 350.200253][T10731] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 350.208041][T10731] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 350.219603][T10761] tipc: Failed to remove unknown binding: 66,1,1/0:357728262/357728264 [ 350.235834][T10731] F2FS-fs (loop4): invalid crc value [ 350.250008][T10761] tipc: Failed to remove unknown binding: 66,1,1/0:357728262/357728264 [ 350.261399][T10731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 350.328027][T10747] loop3: detected capacity change from 0 to 32768 [ 350.374673][T10731] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 350.390017][T10731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 350.435817][ T27] audit: type=1800 audit(1718136895.807:913): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 350.474574][T10747] XFS (loop3): Mounting V5 Filesystem [ 350.512359][T10747] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 350.545578][ T9664] syz-executor.4: attempt to access beyond end of device [ 350.545578][ T9664] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 350.578408][T10747] XFS (loop3): Starting recovery (logdev: internal) [ 350.585372][T10749] loop1: detected capacity change from 0 to 40427 [ 350.596044][T10749] F2FS-fs (loop1): invalid crc value [ 350.611067][T10749] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.617492][T10747] XFS (loop3): Ending recovery (logdev: internal) [ 350.686885][ T27] audit: type=1804 audit(1718136896.057:914): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1884646618/syzkaller.yCQY5C/447/file1/bus" dev="loop3" ino=4425 res=1 errno=0 [ 350.732440][T10749] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 350.770087][ T27] audit: type=1804 audit(1718136896.117:915): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1884646618/syzkaller.yCQY5C/447/file1/bus" dev="loop3" ino=4425 res=1 errno=0 [ 350.798970][T10749] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 350.833227][T10749] syz-executor.1: attempt to access beyond end of device [ 350.833227][T10749] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 350.849052][ T4839] XFS (loop3): Unmounting Filesystem [ 351.017011][T10749] syz-executor.1: attempt to access beyond end of device [ 351.017011][T10749] loop1: rw=2049, sector=53256, nr_sectors = 536 limit=40427 [ 351.062105][T10749] syz-executor.1: attempt to access beyond end of device [ 351.062105][T10749] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 351.129992][T10038] syz-executor.1: attempt to access beyond end of device [ 351.129992][T10038] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 352.400099][ T6577] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 352.660551][T10811] loop1: detected capacity change from 0 to 40427 [ 352.672832][T10811] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 352.680790][T10811] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 352.691874][T10811] F2FS-fs (loop1): invalid crc value [ 352.721080][T10811] F2FS-fs (loop1): Found nat_bits in checkpoint [ 352.767846][ T6577] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 352.861142][T10811] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 352.878481][T10811] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 352.902845][T10833] loop4: detected capacity change from 0 to 2048 [ 352.912556][ T6577] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.937838][ T27] audit: type=1800 audit(1718136898.307:916): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=10 res=0 errno=0 [ 352.976063][ T6577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.987933][ T6577] usb 3-1: SerialNumber: syz [ 352.988627][T10833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 353.004527][T10038] syz-executor.1: attempt to access beyond end of device [ 353.004527][T10038] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 353.060786][ T6577] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 353.148909][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.267375][ T8023] usb 3-1: USB disconnect, device number 17 [ 353.316120][ T9664] EXT4-fs (loop4): unmounting filesystem. [ 353.941645][ T3994] IPVS: stopping backup sync thread 9468 ... [ 354.567372][ T3994] device hsr_slave_0 left promiscuous mode [ 354.589302][ T3994] device hsr_slave_1 left promiscuous mode [ 354.610987][ T3994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.633825][T10874] loop4: detected capacity change from 0 to 1024 [ 354.639935][ T3994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.649693][ T3994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.657397][ T3994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.666870][ T3994] device bridge_slave_1 left promiscuous mode [ 354.683924][ T3994] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.698620][T10874] loop4: detected capacity change from 0 to 1024 [ 354.706883][ T3994] device bridge_slave_0 left promiscuous mode [ 354.713473][ T3994] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.746331][ T3994] device veth1_macvtap left promiscuous mode [ 354.760580][ T3994] device veth0_macvtap left promiscuous mode [ 354.771994][ T3994] device veth1_vlan left promiscuous mode [ 354.782837][ T3994] device veth0_vlan left promiscuous mode [ 354.825376][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 354.963118][T10878] loop4: detected capacity change from 0 to 2048 [ 355.006911][T10878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 355.219833][ T9664] EXT4-fs (loop4): unmounting filesystem. [ 355.220024][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 355.246369][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 355.278267][ T3994] team0 (unregistering): Port device team_slave_1 removed [ 355.326920][ T3994] team0 (unregistering): Port device team_slave_0 removed [ 355.353001][ T3994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.380228][ T3994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.420065][ T3571] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 355.480024][ T26] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 355.499466][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.509462][ T26] usb 1-1: Product: syz [ 355.513964][ T26] usb 1-1: Manufacturer: syz [ 355.525296][ T3994] bond0 (unregistering): Released all slaves [ 355.529658][ T26] usb 1-1: SerialNumber: syz [ 355.548370][ T26] usb 1-1: config 0 descriptor?? [ 356.140307][ T3571] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 356.487225][T10901] loop1: detected capacity change from 0 to 1764 [ 356.596859][ T26] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 356.615924][ T26] usb 1-1: USB disconnect, device number 13 [ 356.655217][ T3571] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.670649][ T3571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 356.688946][ T3571] usb 4-1: SerialNumber: syz [ 356.757051][ T3571] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 356.827152][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.857628][T10906] loop4: detected capacity change from 0 to 2048 [ 356.884967][T10906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.944298][T10906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.975361][T10906] EXT4-fs error (device loop4): empty_inline_dir:1858: inode #12: block 9: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 356.986836][ T26] usb 4-1: USB disconnect, device number 18 [ 357.053156][T10906] EXT4-fs (loop4): Remounting filesystem read-only [ 357.085809][T10906] EXT4-fs warning (device loop4): empty_inline_dir:1865: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 357.194536][ T9664] EXT4-fs (loop4): unmounting filesystem. [ 357.226325][T10919] loop0: detected capacity change from 0 to 2048 [ 357.279611][T10919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.493083][ T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 358.501883][ T9892] EXT4-fs (loop0): unmounting filesystem. [ 358.627237][T10944] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 358.685583][T10923] loop1: detected capacity change from 0 to 40427 [ 358.712038][T10923] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 358.730473][T10923] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 358.754412][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.771708][T10923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 358.885592][T10923] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 358.897036][T10923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 358.910500][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 358.921518][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 359.069718][T10966] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 359.112998][ T26] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 359.131637][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.155641][ T26] usb 5-1: Product: syz [ 359.164414][ T26] usb 5-1: Manufacturer: syz [ 359.173498][ T26] usb 5-1: SerialNumber: syz [ 359.187181][ T26] usb 5-1: config 0 descriptor?? [ 359.316575][T10973] loop3: detected capacity change from 0 to 512 [ 359.387031][T10973] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 359.457933][T10973] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #3: comm syz-executor.3: corrupted inode contents [ 359.620357][T10973] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #3: comm syz-executor.3: mark_inode_dirty error [ 359.653507][ T26] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 359.663509][ T26] usb 5-1: USB disconnect, device number 16 [ 359.671163][T10981] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 359.701197][T10973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 64: padding at end of block bitmap is not set [ 360.486403][T10973] Quota error (device loop3): write_blk: dquota write failed [ 360.515162][T10973] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 360.525284][T10973] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 0 [ 360.556663][T10973] Quota error (device loop3): write_blk: dquota write failed [ 360.585274][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.590224][T10973] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 360.638822][T10973] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 0 [ 360.693610][T10973] Quota error (device loop3): write_blk: dquota write failed [ 360.727893][T10973] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 360.774458][T10973] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 0 [ 360.827174][T10973] EXT4-fs (loop3): 1 orphan inode deleted [ 360.828114][T10994] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 360.843591][T10973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 360.883104][T10973] ext4 filesystem being mounted at /root/syzkaller-testdir1884646618/syzkaller.yCQY5C/461/file1 supports timestamps until 2038 (0x7fffffff) [ 360.956410][T10973] Quota error (device loop3): write_blk: dquota write failed [ 360.990033][T10973] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 361.041152][T10973] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 0 [ 361.093612][T11001] loop0: detected capacity change from 0 to 1764 [ 361.214199][ T4839] EXT4-fs (loop3): unmounting filesystem. [ 361.389113][T11007] loop3: detected capacity change from 0 to 1024 [ 361.513707][T11007] loop3: detected capacity change from 0 to 1024 [ 361.804312][T11012] loop3: detected capacity change from 0 to 2048 [ 361.815275][T11012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.977216][T11012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 362.056076][T11012] EXT4-fs error (device loop3): empty_inline_dir:1858: inode #12: block 9: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 362.350537][T11012] EXT4-fs (loop3): Remounting filesystem read-only [ 362.523088][T11012] EXT4-fs warning (device loop3): empty_inline_dir:1865: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 362.899641][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.922409][T11023] loop1: detected capacity change from 0 to 256 [ 362.932520][ T4839] EXT4-fs (loop3): unmounting filesystem. [ 362.941747][T11023] exfat: Deprecated parameter 'namecase' [ 362.984998][T11027] loop4: detected capacity change from 0 to 64 [ 362.989119][T11023] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0xff19abd0, checksum : 0x1119abd0) [ 363.030360][T11023] exFAT-fs (loop1): invalid boot region [ 363.035954][T11023] exFAT-fs (loop1): failed to recognize exfat type [ 363.196863][T11037] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 363.631404][T11043] loop4: detected capacity change from 0 to 512 [ 363.640146][ T6577] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 364.146495][T11043] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 364.170121][ T6577] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 364.205422][T11043] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #3: comm syz-executor.4: corrupted inode contents [ 364.210005][T11036] loop0: detected capacity change from 0 to 32768 [ 364.228181][T11043] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #3: comm syz-executor.4: mark_inode_dirty error [ 364.250208][T11043] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 364.255990][T11036] XFS (loop0): Mounting V5 Filesystem [ 364.270011][T11043] Quota error (device loop4): write_blk: dquota write failed [ 364.277821][T11043] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 364.288593][T11043] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0 [ 364.300578][ T6577] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.303965][T11036] XFS (loop0): Ending clean mount [ 364.309604][ T6577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 364.309627][ T6577] usb 4-1: SerialNumber: syz [ 364.329075][T11043] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0 [ 364.344441][T11043] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0 [ 364.356746][T11043] EXT4-fs (loop4): 1 orphan inode deleted [ 364.363414][ T6577] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 364.364774][ T9892] XFS (loop0): Unmounting Filesystem [ 364.370250][T11043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 364.387111][T11043] ext4 filesystem being mounted at /root/syzkaller-testdir4001238247/syzkaller.wE8Lcn/104/file1 supports timestamps until 2038 (0x7fffffff) [ 364.419200][T11043] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0 [ 364.495134][ T9664] EXT4-fs (loop4): unmounting filesystem. [ 364.583424][ T6577] usb 4-1: USB disconnect, device number 19 [ 364.604619][T11069] loop4: detected capacity change from 0 to 64 [ 365.564792][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 365.564810][ T27] audit: type=1326 audit(1718136910.777:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11076 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728727cea9 code=0x0 [ 365.625601][T11079] autofs4:pid:11079:autofs_fill_super: called with bogus options [ 365.799286][T11092] loop0: detected capacity change from 0 to 256 [ 365.814826][T11092] exfat: Deprecated parameter 'namecase' [ 365.836519][T11092] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0xff19abd0, checksum : 0x1119abd0) [ 365.841510][T11091] loop1: detected capacity change from 0 to 2048 [ 365.850171][T11092] exFAT-fs (loop0): invalid boot region [ 365.861689][T11091] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.868049][T11092] exFAT-fs (loop0): failed to recognize exfat type [ 365.889618][T11091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.916784][T11091] EXT4-fs error (device loop1): empty_inline_dir:1858: inode #12: block 9: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 365.946511][T11091] EXT4-fs (loop1): Remounting filesystem read-only [ 365.958758][T11091] EXT4-fs warning (device loop1): empty_inline_dir:1865: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 366.043117][T10038] EXT4-fs (loop1): unmounting filesystem. [ 366.111476][T11103] loop1: detected capacity change from 0 to 64 [ 366.204870][T11096] loop3: detected capacity change from 0 to 32768 [ 366.245867][T11096] XFS (loop3): Mounting V5 Filesystem [ 366.300005][ T6577] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 366.322743][T11096] XFS (loop3): Ending clean mount [ 366.383740][T11121] autofs4:pid:11121:autofs_fill_super: called with bogus options [ 366.420998][ T4839] XFS (loop3): Unmounting Filesystem [ 367.357058][ T6577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 367.395201][ T6577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 367.422334][T11132] loop0: detected capacity change from 0 to 1024 [ 367.429552][T11132] EXT4-fs: Ignoring removed nobh option [ 367.435295][ T6577] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.462129][ T6577] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.474535][T11138] loop1: detected capacity change from 0 to 128 [ 367.486854][T11132] EXT4-fs: Ignoring removed orlov option [ 367.501085][ T6577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.503586][T11138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 367.509087][ T27] audit: type=1326 audit(1718136912.877:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f205b67cea9 code=0x0 [ 367.519026][T11132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.548807][ T6577] usb 3-1: config 0 descriptor?? [ 367.559667][T11138] ext4 filesystem being mounted at /root/syzkaller-testdir295452130/syzkaller.BgogTE/44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 367.595834][T11100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 367.636548][T11132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 367.669273][T11138] overlayfs: upper fs needs to support d_type. [ 367.713097][T10038] EXT4-fs (loop1): unmounting filesystem. [ 367.799636][T11156] loop1: detected capacity change from 0 to 256 [ 367.806842][T11156] exfat: Deprecated parameter 'namecase' [ 367.814738][T11156] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0xff19abd0, checksum : 0x1119abd0) [ 367.828523][T11156] exFAT-fs (loop1): invalid boot region [ 367.834591][T11156] exFAT-fs (loop1): failed to recognize exfat type [ 367.848919][ T9892] EXT4-fs (loop0): unmounting filesystem. [ 367.940012][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 368.051386][ T6577] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 368.059960][ T6577] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 368.071450][ T6577] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 368.960283][T11167] autofs4:pid:11167:autofs_fill_super: called with bogus options [ 368.963002][ T155] usb 3-1: USB disconnect, device number 18 [ 369.030186][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 369.054655][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 369.157150][T11185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.240071][ T7] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 369.251421][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.261246][ T7] usb 5-1: Product: syz [ 369.266065][ T7] usb 5-1: Manufacturer: syz [ 369.270931][ T7] usb 5-1: SerialNumber: syz [ 369.291144][ T7] usb 5-1: config 0 descriptor?? [ 370.261326][ T7] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 370.302422][ T7] usb 5-1: USB disconnect, device number 17 [ 370.458809][T11209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.567911][T11216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.749824][ T27] audit: type=1326 audit(1718136916.117:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5221a7cea9 code=0x0 [ 370.795007][T11226] loop4: detected capacity change from 0 to 64 [ 370.869415][T11231] ALSA: mixer_oss: invalid OSS volume '' [ 370.929434][T11233] loop4: detected capacity change from 0 to 256 [ 370.999461][T11233] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 324) [ 371.018449][T11233] FAT-fs (loop4): Filesystem has been set read-only [ 371.028743][T11233] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 324) [ 371.057195][T11236] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 371.183306][T11240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.361968][T11229] loop1: detected capacity change from 0 to 32768 [ 371.657130][T11254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.750147][ T155] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 371.932287][T11265] loop0: detected capacity change from 0 to 64 [ 372.084014][T11272] loop3: detected capacity change from 0 to 256 [ 372.140071][ T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 372.145005][T11272] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 324) [ 372.166277][ T155] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 372.186112][T11272] FAT-fs (loop3): Filesystem has been set read-only [ 372.211220][T11272] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 324) [ 372.248619][T11277] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 372.331484][T11280] loop1: detected capacity change from 0 to 1024 [ 372.338720][T11280] EXT4-fs: Ignoring removed nobh option [ 372.350103][ T155] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 372.359148][ T155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.379964][T11280] EXT4-fs: Ignoring removed orlov option [ 372.385637][T11280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.392268][ T155] usb 5-1: Product: syz [ 372.396436][ T155] usb 5-1: Manufacturer: syz [ 372.408896][ T155] usb 5-1: SerialNumber: syz [ 372.423646][ T155] usb 5-1: config 0 descriptor?? [ 372.450375][T11280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 372.510078][ T3570] Bluetooth: hci0: command tx timeout [ 372.610699][ T27] audit: type=1326 audit(1718136917.987:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f205b67cea9 code=0x0 [ 372.655404][T10038] EXT4-fs (loop1): unmounting filesystem. [ 372.765541][T11278] loop0: detected capacity change from 0 to 32768 [ 372.777006][ T155] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 372.793244][ T155] usb 5-1: USB disconnect, device number 18 [ 372.825444][T11293] loop1: detected capacity change from 0 to 1764 [ 372.840612][T11278] XFS (loop0): Mounting V5 Filesystem [ 372.982483][T11278] XFS (loop0): Ending clean mount [ 373.065512][ T9892] XFS (loop0): Unmounting Filesystem [ 373.470591][T11331] ALSA: mixer_oss: invalid OSS volume '' [ 374.449642][T11352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.666932][T11370] loop3: detected capacity change from 0 to 64 [ 374.699697][T11370] hfs: bad catalog namelength [ 374.713653][T11370] hfs: get root inode failed [ 374.873214][T11386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.921995][T11387] loop0: detected capacity change from 0 to 1764 [ 375.028275][T11399] loop4: detected capacity change from 0 to 1024 [ 375.035862][T11399] EXT4-fs: Ignoring removed nobh option [ 375.049256][T11399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.094672][T11399] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 375.106393][T11407] loop0: detected capacity change from 0 to 64 [ 375.122742][T11407] hfs: bad catalog namelength [ 375.129088][T11405] loop3: detected capacity change from 0 to 256 [ 375.132147][T11407] hfs: get root inode failed [ 375.179556][T11405] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 324) [ 375.194188][T11399] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 375.232363][T11405] FAT-fs (loop3): Filesystem has been set read-only [ 375.239095][T11405] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 324) [ 375.248736][T11399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 375.261764][T11412] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 375.325294][T11399] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 375.354136][T11399] Quota error (device loop4): write_blk: dquota write failed [ 375.362502][T11399] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 375.373796][T11399] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0 [ 375.432505][ T9664] EXT4-fs (loop4): unmounting filesystem. [ 375.598223][T11440] ALSA: mixer_oss: invalid OSS volume '' [ 375.711676][T11446] loop3: detected capacity change from 0 to 1024 [ 375.819227][ T3994] hfsplus: b-tree write err: -5, ino 4 [ 375.926117][T11465] loop4: detected capacity change from 0 to 64 [ 376.222328][T11487] loop0: detected capacity change from 0 to 1024 [ 376.299310][ T56] hfsplus: b-tree write err: -5, ino 4 [ 376.507014][T11505] loop1: detected capacity change from 0 to 8192 [ 376.520068][ T3571] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 376.565341][T11505] loop1: p1 < > p2 [ 376.571214][T11505] loop1: partition table partially beyond EOD, truncated [ 376.587649][T11505] loop1: p1 start 4177526784 is beyond EOD, truncated [ 376.604934][T11505] loop1: p2 start 163840 is beyond EOD, truncated [ 376.626523][T11514] loop4: detected capacity change from 0 to 2048 [ 376.642815][T11514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.929965][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 377.303186][T11525] loop3: detected capacity change from 0 to 1024 [ 377.627902][ T40] hfsplus: b-tree write err: -5, ino 4 [ 377.732179][ T3571] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 377.745287][ T3571] usb 3-1: config 179 has no interface number 0 [ 377.761969][ T3571] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 377.791305][ T3571] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 377.822932][ T3571] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 377.834238][ T3571] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 377.845967][ T3571] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 377.864957][ T3571] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 377.874376][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.903236][T11490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.299604][T11560] loop4: detected capacity change from 0 to 256 [ 378.368972][T11560] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 378.383827][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.397231][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.799202][ T3571] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input41 [ 378.921834][ T3571] usb 3-1: USB disconnect, device number 19 [ 378.929998][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 378.938292][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 378.967750][ T3571] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 379.048831][T11568] loop4: detected capacity change from 0 to 1024 [ 379.182907][T10985] hfsplus: b-tree write err: -5, ino 4 [ 379.590899][T11608] loop1: detected capacity change from 0 to 256 [ 379.627038][T11608] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d) [ 382.253872][T11655] loop0: detected capacity change from 0 to 1024 [ 382.372509][T11655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.830100][ T3571] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 382.835499][T11646] loop4: detected capacity change from 0 to 32768 [ 382.846665][T11646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11646) [ 382.874353][T11646] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 382.884842][T11646] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 382.897776][T11646] BTRFS info (device loop4): using free space tree [ 382.929977][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 382.953903][T11646] BTRFS info (device loop4): enabling ssd optimizations [ 383.024877][ T9664] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.201580][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 383.285128][ T3571] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 383.320044][ T7] usb 1-1: config 4 has an invalid interface number: 55 but max is 3 [ 383.331529][ T7] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 383.352947][ T7] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 383.368171][ T7] usb 1-1: config 4 has no interface number 0 [ 383.374840][ T7] usb 1-1: config 4 interface 55 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 383.388412][ T7] usb 1-1: config 4 interface 55 has no altsetting 0 [ 383.405127][ T7] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=64.39 [ 383.421089][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.492963][T11708] [ 383.495311][T11708] ====================================================== [ 383.502313][T11708] WARNING: possible circular locking dependency detected [ 383.509325][T11708] 6.1.92-syzkaller #0 Not tainted [ 383.514336][T11708] ------------------------------------------------------ [ 383.521336][T11708] syz-executor.2/11708 is trying to acquire lock: [ 383.527728][T11708] ffff88805e3f8d00 (team->team_lock_key#8){+.+.}-{3:3}, at: team_del_slave+0x2e/0x1c0 [ 383.537296][T11708] [ 383.537296][T11708] but task is already holding lock: [ 383.544641][T11708] ffff8880637907c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 383.554456][T11708] [ 383.554456][T11708] which lock already depends on the new lock. [ 383.554456][T11708] [ 383.564838][T11708] [ 383.564838][T11708] the existing dependency chain (in reverse order) is: [ 383.573830][T11708] [ 383.573830][T11708] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 383.581551][T11708] lock_acquire+0x1f8/0x5a0 [ 383.586570][T11708] __mutex_lock+0x132/0xd80 [ 383.591578][T11708] ieee80211_open+0x13a/0x1f0 [ 383.596766][T11708] __dev_open+0x377/0x510 [ 383.601600][T11708] dev_open+0xa9/0x260 [ 383.606171][T11708] team_add_slave+0x96e/0x2760 [ 383.611450][T11708] do_setlink+0xe99/0x3de0 [ 383.616370][T11708] rtnl_newlink+0x172c/0x2050 [ 383.621559][T11708] rtnetlink_rcv_msg+0x818/0xff0 [ 383.627011][T11708] netlink_rcv_skb+0x1cd/0x410 [ 383.632294][T11708] netlink_unicast+0x7d8/0x970 [ 383.637570][T11708] netlink_sendmsg+0xa26/0xd60 [ 383.642837][T11708] ____sys_sendmsg+0x5a5/0x8f0 [ 383.648102][T11708] __sys_sendmsg+0x2a9/0x390 [ 383.653204][T11708] do_syscall_64+0x3b/0xb0 [ 383.658136][T11708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.664540][T11708] [ 383.664540][T11708] -> #0 (team->team_lock_key#8){+.+.}-{3:3}: [ 383.672696][T11708] validate_chain+0x1661/0x5950 [ 383.678060][T11708] __lock_acquire+0x125b/0x1f80 [ 383.683420][T11708] lock_acquire+0x1f8/0x5a0 [ 383.688455][T11708] __mutex_lock+0x132/0xd80 [ 383.693483][T11708] team_del_slave+0x2e/0x1c0 [ 383.698584][T11708] team_device_event+0x269/0x570 [ 383.704036][T11708] raw_notifier_call_chain+0xd0/0x170 [ 383.709917][T11708] unregister_netdevice_many+0xec1/0x17a0 [ 383.716159][T11708] unregister_netdevice_queue+0x2e6/0x350 [ 383.722398][T11708] _cfg80211_unregister_wdev+0x174/0x570 [ 383.728540][T11708] ieee80211_if_remove+0x1cc/0x2d0 [ 383.734160][T11708] ieee80211_del_iface+0x15/0x20 [ 383.739607][T11708] cfg80211_remove_virtual_intf+0x270/0x490 [ 383.746010][T11708] genl_rcv_msg+0xc1a/0xf70 [ 383.751019][T11708] netlink_rcv_skb+0x1cd/0x410 [ 383.756293][T11708] genl_rcv+0x24/0x40 [ 383.760788][T11708] netlink_unicast+0x7d8/0x970 [ 383.766065][T11708] netlink_sendmsg+0xa26/0xd60 [ 383.771343][T11708] ____sys_sendmsg+0x5a5/0x8f0 [ 383.776631][T11708] __sys_sendmsg+0x2a9/0x390 [ 383.781725][T11708] do_syscall_64+0x3b/0xb0 [ 383.786652][T11708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.793058][T11708] [ 383.793058][T11708] other info that might help us debug this: [ 383.793058][T11708] [ 383.803268][T11708] Possible unsafe locking scenario: [ 383.803268][T11708] [ 383.810696][T11708] CPU0 CPU1 [ 383.816040][T11708] ---- ---- [ 383.821392][T11708] lock(&rdev->wiphy.mtx); [ 383.825884][T11708] lock(team->team_lock_key#8); [ 383.833329][T11708] lock(&rdev->wiphy.mtx); [ 383.840335][T11708] lock(team->team_lock_key#8); [ 383.845262][T11708] [ 383.845262][T11708] *** DEADLOCK *** [ 383.845262][T11708] [ 383.853385][T11708] 3 locks held by syz-executor.2/11708: [ 383.858909][T11708] #0: ffffffff8e2fa0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 383.867077][T11708] #1: ffffffff8e29b028 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 [ 383.876287][T11708] #2: ffff8880637907c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x112/0x130 [ 383.886534][T11708] [ 383.886534][T11708] stack backtrace: [ 383.892409][T11708] CPU: 0 PID: 11708 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 383.900817][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 383.910870][T11708] Call Trace: [ 383.914133][T11708] [ 383.917049][T11708] dump_stack_lvl+0x1e3/0x2cb [ 383.921722][T11708] ? nf_tcp_handle_invalid+0x642/0x642 [ 383.927182][T11708] ? print_circular_bug+0x12b/0x1a0 [ 383.932366][T11708] check_noncircular+0x2fa/0x3b0 [ 383.937290][T11708] ? add_chain_block+0x850/0x850 [ 383.942218][T11708] ? lockdep_lock+0x11f/0x2a0 [ 383.946886][T11708] ? is_bpf_text_address+0x22/0x2a0 [ 383.952072][T11708] ? _find_first_zero_bit+0xd0/0x100 [ 383.957348][T11708] validate_chain+0x1661/0x5950 [ 383.962207][T11708] ? reacquire_held_locks+0x660/0x660 [ 383.967574][T11708] ? reacquire_held_locks+0x660/0x660 [ 383.972939][T11708] ? mark_lock+0x9a/0x340 [ 383.977258][T11708] ? __lock_acquire+0x125b/0x1f80 [ 383.982275][T11708] ? mark_lock+0x9a/0x340 [ 383.986611][T11708] __lock_acquire+0x125b/0x1f80 [ 383.991457][T11708] lock_acquire+0x1f8/0x5a0 [ 383.995960][T11708] ? team_del_slave+0x2e/0x1c0 [ 384.000716][T11708] ? read_lock_is_recursive+0x10/0x10 [ 384.006079][T11708] ? __might_sleep+0xb0/0xb0 [ 384.010655][T11708] ? xsk_notifier+0x20f/0x220 [ 384.015315][T11708] ? bpf_trace_run1+0x3d0/0x3d0 [ 384.020154][T11708] ? __lock_acquire+0x1f80/0x1f80 [ 384.025180][T11708] __mutex_lock+0x132/0xd80 [ 384.029669][T11708] ? team_del_slave+0x2e/0x1c0 [ 384.034425][T11708] ? __mutex_lock+0x2f7/0xd80 [ 384.039087][T11708] ? bond_netdev_event+0xde/0xe50 [ 384.044114][T11708] ? team_del_slave+0x2e/0x1c0 [ 384.048866][T11708] ? mutex_lock_nested+0x10/0x10 [ 384.053786][T11708] ? bond_ipsec_offload_ok+0x400/0x400 [ 384.059238][T11708] ? memset+0x1f/0x40 [ 384.063208][T11708] team_del_slave+0x2e/0x1c0 [ 384.067788][T11708] team_device_event+0x269/0x570 [ 384.072720][T11708] raw_notifier_call_chain+0xd0/0x170 [ 384.078080][T11708] unregister_netdevice_many+0xec1/0x17a0 [ 384.083796][T11708] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 384.088810][T11708] ? kasan_quarantine_put+0xd4/0x220 [ 384.094099][T11708] ? lockdep_hardirqs_on+0x94/0x130 [ 384.099282][T11708] ? up_write+0x19d/0x580 [ 384.103610][T11708] unregister_netdevice_queue+0x2e6/0x350 [ 384.109326][T11708] ? list_netdevice+0x660/0x660 [ 384.114172][T11708] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 384.119883][T11708] _cfg80211_unregister_wdev+0x174/0x570 [ 384.125506][T11708] ieee80211_if_remove+0x1cc/0x2d0 [ 384.130609][T11708] ieee80211_del_iface+0x15/0x20 [ 384.135564][T11708] cfg80211_remove_virtual_intf+0x270/0x490 [ 384.141461][T11708] ? nl80211_del_interface+0x112/0x130 [ 384.146908][T11708] genl_rcv_msg+0xc1a/0xf70 [ 384.151417][T11708] ? genl_bind+0x400/0x400 [ 384.155831][T11708] ? read_lock_is_recursive+0x10/0x10 [ 384.161202][T11708] ? ref_tracker_free+0x638/0x7d0 [ 384.166212][T11708] ? nl80211_new_interface+0x1110/0x1110 [ 384.171852][T11708] ? refcount_inc+0x80/0x80 [ 384.176339][T11708] ? __copy_skb_header+0x47b/0x600 [ 384.181440][T11708] netlink_rcv_skb+0x1cd/0x410 [ 384.186206][T11708] ? genl_bind+0x400/0x400 [ 384.190607][T11708] ? netlink_ack+0x1290/0x1290 [ 384.195369][T11708] genl_rcv+0x24/0x40 [ 384.199339][T11708] netlink_unicast+0x7d8/0x970 [ 384.204099][T11708] ? netlink_detachskb+0x90/0x90 [ 384.209039][T11708] ? __virt_addr_valid+0x44a/0x520 [ 384.214159][T11708] ? __phys_addr_symbol+0x2b/0x70 [ 384.219179][T11708] ? __check_object_size+0x4dd/0xa30 [ 384.224453][T11708] ? bpf_lsm_netlink_send+0x5/0x10 [ 384.229553][T11708] netlink_sendmsg+0xa26/0xd60 [ 384.234310][T11708] ? netlink_getsockopt+0x580/0x580 [ 384.239494][T11708] ? aa_sock_msg_perm+0x91/0x150 [ 384.244425][T11708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 384.249701][T11708] ? security_socket_sendmsg+0x7d/0xa0 [ 384.255147][T11708] ? netlink_getsockopt+0x580/0x580 [ 384.260333][T11708] ____sys_sendmsg+0x5a5/0x8f0 [ 384.265084][T11708] ? __sys_sendmsg_sock+0x30/0x30 [ 384.270098][T11708] __sys_sendmsg+0x2a9/0x390 [ 384.274673][T11708] ? ____sys_sendmsg+0x8f0/0x8f0 [ 384.279600][T11708] ? rcu_is_watching+0x11/0xb0 [ 384.284355][T11708] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 384.290334][T11708] ? syscall_enter_from_user_mode+0x2e/0x230 [ 384.296302][T11708] ? lockdep_hardirqs_on+0x94/0x130 [ 384.301486][T11708] ? syscall_enter_from_user_mode+0x2e/0x230 [ 384.307453][T11708] do_syscall_64+0x3b/0xb0 [ 384.311874][T11708] ? clear_bhb_loop+0x45/0xa0 [ 384.316552][T11708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.322436][T11708] RIP: 0033:0x7efd0a07cea9 [ 384.326849][T11708] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 384.346443][T11708] RSP: 002b:00007efd0ae0c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.354843][T11708] RAX: ffffffffffffffda RBX: 00007efd0a1b3f80 RCX: 00007efd0a07cea9 [ 384.362800][T11708] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000005 [ 384.370755][T11708] RBP: 00007efd0a0ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 384.378709][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.386663][T11708] R13: 000000000000000b R14: 00007efd0a1b3f80 R15: 00007fffac318328 2024/06/11 20:15:29 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 384.394638][T11708] [ 384.397723][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.397775][ T3571] usb 4-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 384.449975][ T7] usb 1-1: string descriptor 0 read error: -71 [ 384.460159][ T3571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.473531][ T3571] usb 4-1: Product: syz [ 384.474651][ T7] usb 1-1: USB disconnect, device number 14 [ 384.477704][ T3571] usb 4-1: Manufacturer: syz [ 384.511908][ T3571] usb 4-1: SerialNumber: syz [ 384.654742][T11708] team0: Port device wlan1 removed