last executing test programs: 2m36.230758677s ago: executing program 0 (id=2298): set_mempolicy(0x2002, 0x0, 0x9) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 2m34.267460612s ago: executing program 0 (id=2304): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000017000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) mmap(&(0x7f00007f6000/0x4000)=nil, 0x4000, 0x0, 0x8031, r0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 2m29.88691057s ago: executing program 0 (id=2308): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 2m28.030523094s ago: executing program 0 (id=2316): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='oom_score\x00') lseek(r9, 0x2000, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 2m24.67723126s ago: executing program 0 (id=2321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a3100000000050004000000000010000300686173683a69702c6d61630014000780080008400000001508000640000000000500050002000000050001"], 0x5c}}, 0x0) 2m23.676953362s ago: executing program 0 (id=2327): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000080)) bind$can_j1939(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}}, 0x3f) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r6, 0x1, {0x0, 0xff, 0x2}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m8.033786564s ago: executing program 32 (id=2327): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000080)) bind$can_j1939(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}}, 0x3f) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r6, 0x1, {0x0, 0xff, 0x2}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 25.331367579s ago: executing program 4 (id=2652): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2e365a339683931c}]}}, 0x0, 0x2a, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) io_uring_enter(r3, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0x402c560b, &(0x7f0000000040)={0xf0f071, 0x1}) ppoll(&(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x44080) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff2, 0xa}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x3, 0x4c9, 0x1, 0x101}, {0x7, 0x1, 0xce, 0x3, 0x2, 0x1}, 0x7, 0x3, 0x32d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe6ccd60b157bc5c8}, @TCA_TBF_RATE64={0xc, 0x4, 0xd34b0ff52d069371}]}}]}, 0x70}}, 0x4000) 22.871492584s ago: executing program 4 (id=2655): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) writev(r2, &(0x7f0000001480)=[{&(0x7f00000001c0)='}', 0x1}], 0x1) splice(r2, 0x0, r3, 0x0, 0xffffffe1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 22.465717745s ago: executing program 4 (id=2657): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 22.127314316s ago: executing program 4 (id=2659): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x31, 0x4, 0xffffffff) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 20.11982416s ago: executing program 4 (id=2663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) truncate(&(0x7f0000000000)='./file2\x00', 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x14000, &(0x7f0000000000)=ANY=[], 0x4, 0x293, &(0x7f0000000900)="$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") 17.732755404s ago: executing program 4 (id=2668): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="286d81866e6b77fbbd308e1683", 0xd}], 0x1, 0x0, 0x0, 0x24008000}, 0xc040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000014c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xb9, 0xd, 0x4, 0x0, 0x4}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20200, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) syz_open_dev$usbmon(0x0, 0x151, 0x100) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x13, r5, 0x58341000) 7.955286474s ago: executing program 5 (id=2698): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mq_open(0x0, 0x1, 0x10, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 7.640953624s ago: executing program 2 (id=2699): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003b40)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="7b400b5790ecb6459eb5bce2589677d5bf02c647ced50e9e1e3431cad7434ec6589f0430e1c22a0bec916c0a5ab101587a4b7353ea01bab51a6650c2e99f14acd624c99e4d1cd803d9b7868c76eb2cc6cd477f428ff4e4d379133d37381eb4c6b8a58a05d1df29687b2bbf3e313ddb4dcaec399fcf563c0871d0f7ca", 0x7c}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0xa911661a0e33e064) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.640706934s ago: executing program 3 (id=2700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43fab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000f00)={0x0, 0x20, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000000090001"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1d8e0, 0x1a704}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x4}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x54}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x9}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 6.309036037s ago: executing program 5 (id=2701): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x197803, 0x0) preadv2(r0, &(0x7f0000002500), 0x0, 0x0, 0x0, 0x1c) fcntl$addseals(r0, 0x409, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000480)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)) 6.273378917s ago: executing program 2 (id=2702): socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket(0x18, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) socket(0x18, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f00000001c0)=0x2) 6.272478727s ago: executing program 1 (id=2703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fstat(r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) userfaultfd(0x80001) 6.047063747s ago: executing program 3 (id=2704): syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff1c0898e813703caa792305009211d49ccc8008204500001c00000000008890780a010101ffffffff11"], 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) 4.636281511s ago: executing program 5 (id=2705): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-avx2)\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x20, 0x3f, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="ba5dd95e"]}]}, 0x20}}, 0x0) 4.61961076s ago: executing program 1 (id=2706): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 4.440929301s ago: executing program 2 (id=2707): ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5000000000000000) 4.170401151s ago: executing program 3 (id=2708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x5abf96c6620c6a8b, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x894) 4.047499381s ago: executing program 2 (id=2709): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 3.811439032s ago: executing program 3 (id=2710): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mq_open(0x0, 0x1, 0x10, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 3.572680232s ago: executing program 1 (id=2711): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) 3.439460153s ago: executing program 2 (id=2712): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003b40)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="7b400b5790ecb6459eb5bce2589677d5bf02c647ced50e9e1e3431cad7434ec6589f0430e1c22a0bec916c0a5ab101587a4b7353ea01bab51a6650c2e99f14acd624c99e4d1cd803d9b7868c76eb2cc6cd477f428ff4e4d379133d37381eb4c6b8a58a05d1df29687b2bbf3e313ddb4dcaec399fcf563c0871d0f7ca", 0x7c}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0xa911661a0e33e064) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.320749243s ago: executing program 2 (id=2713): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xff, 0xc9}}}, 0x6) socket$key(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 3.231128433s ago: executing program 5 (id=2714): io_uring_setup(0x11eb, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) syz_io_uring_setup(0x748d, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 2.679832974s ago: executing program 3 (id=2715): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x197803, 0x0) preadv2(r0, &(0x7f0000002500), 0x0, 0x0, 0x0, 0x1c) fcntl$addseals(r0, 0x409, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000480)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_setup(0x4, &(0x7f0000000000)) 2.263426015s ago: executing program 1 (id=2716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fstat(r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) userfaultfd(0x80001) 1.228431157s ago: executing program 5 (id=2717): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) 1.120631907s ago: executing program 1 (id=2718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 959.244958ms ago: executing program 5 (id=2719): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x200, @empty, 0x2}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x20) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0xe, 0x1}, 0x80, 0x40, &(0x7f00000000c0), 0x0, 0x2, 0xff, 0x80000000, 0x3, 0x1, &(0x7f0000000200)="9ef5432bf61293c2d562aca511cdaece4269dc52f2011137008fd8a1cf61be93de8924a77cc15b678521835a3308f272f16561fd3ebe3e1dd23f15aa354636b44efa5a8ff37bfbd17a7ab9dbc5"}) 879.879088ms ago: executing program 3 (id=2720): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 0s ago: executing program 1 (id=2721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x5abf96c6620c6a8b, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x894) kernel console output (not intermixed with test programs): esystem. [ 411.643151][ T7315] loop0: detected capacity change from 0 to 4096 [ 413.158731][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'. [ 413.526276][ T7342] loop1: detected capacity change from 0 to 512 [ 413.626981][ T7342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 413.749421][ T7342] EXT4-fs (loop1): 1 truncate cleaned up [ 413.785986][ T7342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 414.093700][ T7350] loop0: detected capacity change from 0 to 512 [ 414.132414][ T7350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 414.257686][ T7350] EXT4-fs (loop0): 1 truncate cleaned up [ 414.268160][ T7350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 414.300108][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 415.276596][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 417.108411][ T7381] loop3: detected capacity change from 0 to 4096 [ 417.326897][ T7388] loop1: detected capacity change from 0 to 512 [ 417.362150][ T7388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 417.438601][ T7388] EXT4-fs (loop1): 1 truncate cleaned up [ 417.452275][ T7388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 418.462531][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 423.028379][ T7428] loop1: detected capacity change from 0 to 32768 [ 423.083888][ T7428] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.865 (7428) [ 423.164307][ T7428] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 423.204373][ T7428] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 423.244927][ T7428] BTRFS info (device loop1): using free space tree [ 423.524356][ T7428] BTRFS info (device loop1): enabling ssd optimizations [ 423.617317][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 423.617334][ T27] audit: type=1804 audit(1734068805.922:34): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.865" name="/newroot/191/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 423.739319][ T7428] syz.1.865 (7428) used greatest stack depth: 19472 bytes left [ 424.180069][ T4249] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 428.191453][ T7497] loop3: detected capacity change from 0 to 1024 [ 428.390902][ T7497] hfsplus: request for non-existent node 196608 in B*Tree [ 428.398494][ T7497] hfsplus: request for non-existent node 196608 in B*Tree [ 428.406416][ T7497] hfsplus: failed to load root directory [ 428.640872][ T7499] loop0: detected capacity change from 0 to 2048 [ 429.199698][ T7499] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 429.207517][ T7499] UDF-fs: Scanning with blocksize 512 failed [ 429.218998][ T7499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.154372][ T7510] loop1: detected capacity change from 0 to 64 [ 431.456325][ T7510] hfs: unable to locate alternate MDB [ 431.462161][ T7510] hfs: continuing without an alternate MDB [ 435.591900][ T7550] loop2: detected capacity change from 0 to 16 [ 435.638876][ T7550] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 435.974060][ T7555] loop4: detected capacity change from 0 to 2048 [ 436.042586][ T7555] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 436.109474][ T7555] UDF-fs: Scanning with blocksize 512 failed [ 436.143354][ T7555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.047682][ T7572] loop3: detected capacity change from 0 to 512 [ 438.259453][ T7572] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 439.065674][ T7572] EXT4-fs (loop3): 1 truncate cleaned up [ 439.071390][ T7572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 439.936464][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943499][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.159994][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 442.932862][ T7617] loop0: detected capacity change from 0 to 1764 [ 443.219838][ T7621] loop1: detected capacity change from 0 to 16 [ 443.249439][ T7621] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 443.689479][ T7629] loop4: detected capacity change from 0 to 512 [ 443.724022][ T7629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 443.762561][ T7631] loop2: detected capacity change from 0 to 512 [ 443.815695][ T7629] EXT4-fs (loop4): 1 truncate cleaned up [ 443.821408][ T7629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 443.836573][ T7631] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 444.026361][ T7631] EXT4-fs (loop2): 1 truncate cleaned up [ 444.032085][ T7631] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 444.047488][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 444.255460][ T7639] device batadv1 entered promiscuous mode [ 445.513297][ T5065] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 445.543463][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 445.606977][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 445.624576][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'. [ 445.633953][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 445.688357][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'. [ 446.563337][ T7666] loop0: detected capacity change from 0 to 1024 [ 446.592815][ T7666] hfsplus: request for non-existent node 196608 in B*Tree [ 446.600212][ T7666] hfsplus: request for non-existent node 196608 in B*Tree [ 446.607585][ T7666] hfsplus: failed to load root directory [ 446.655932][ T4261] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.245213][ T7678] loop1: detected capacity change from 0 to 512 [ 447.252420][ T7678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 447.269325][ T7678] EXT4-fs (loop1): 1 truncate cleaned up [ 447.269357][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 448.612752][ T7691] loop2: detected capacity change from 0 to 512 [ 448.694417][ T7691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 448.732428][ T7691] EXT4-fs (loop2): 1 truncate cleaned up [ 448.760846][ T7691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 449.290012][ T7703] device batadv1 entered promiscuous mode [ 449.348921][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 449.405476][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 449.465724][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 449.559555][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 449.578936][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 449.747682][ T7707] loop2: detected capacity change from 0 to 764 [ 449.772810][ T7707] rock: directory entry would overflow storage [ 449.779181][ T7707] rock: sig=0x4f50, size=4, remaining=3 [ 449.784805][ T7707] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 451.283346][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 454.147217][ T7742] loop2: detected capacity change from 0 to 512 [ 454.155025][ T7742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 454.263894][ T7742] EXT4-fs (loop2): 1 truncate cleaned up [ 454.270313][ T7742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 454.613552][ T7751] loop1: detected capacity change from 0 to 764 [ 454.627559][ T7751] rock: directory entry would overflow storage [ 454.633952][ T7751] rock: sig=0x4f50, size=4, remaining=3 [ 454.639721][ T7751] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 455.481646][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 456.047548][ T7763] loop1: detected capacity change from 0 to 16 [ 456.094642][ T7763] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 456.228634][ T7762] loop4: detected capacity change from 0 to 512 [ 456.381189][ T7762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 456.882684][ T7762] EXT4-fs (loop4): 1 truncate cleaned up [ 456.888794][ T7762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 457.749933][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 460.291502][ T7802] loop1: detected capacity change from 0 to 764 [ 460.317071][ T7802] rock: directory entry would overflow storage [ 460.323326][ T7802] rock: sig=0x4f50, size=4, remaining=3 [ 460.329098][ T7802] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 460.561201][ T7806] loop2: detected capacity change from 0 to 512 [ 460.614396][ T7806] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 460.705024][ T7806] EXT4-fs (loop2): 1 truncate cleaned up [ 460.718421][ T7806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 461.451202][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 461.515805][ T7816] loop1: detected capacity change from 0 to 16 [ 461.559230][ T7816] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 462.586365][ T7826] loop3: detected capacity change from 0 to 512 [ 462.656463][ T7826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 462.775816][ T7826] EXT4-fs (loop3): 1 truncate cleaned up [ 462.781550][ T7826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 462.872705][ T7833] loop0: detected capacity change from 0 to 128 [ 462.894261][ T7833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 462.981910][ T7833] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 464.130059][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 464.170623][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 465.223006][ T7859] loop0: detected capacity change from 0 to 512 [ 465.269194][ T7859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 465.989084][ T7859] EXT4-fs (loop0): 1 truncate cleaned up [ 466.006577][ T7859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 466.644751][ T7871] fuse: Bad value for 'fd' [ 468.420211][ T7890] loop3: detected capacity change from 0 to 512 [ 468.467992][ T7890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 468.521043][ T7890] EXT4-fs (loop3): 1 truncate cleaned up [ 468.534278][ T7890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 469.003250][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 470.080534][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 470.504751][ T7907] fuse: Bad value for 'fd' [ 471.246392][ T7911] device batadv1 entered promiscuous mode [ 473.042282][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.982'. [ 473.108109][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.982'. [ 473.181179][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.982'. [ 473.193786][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.982'. [ 473.812706][ T7940] loop1: detected capacity change from 0 to 512 [ 473.847248][ T7940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 474.069246][ T7940] EXT4-fs (loop1): 1 truncate cleaned up [ 474.080557][ T7940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 474.808058][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 477.042514][ T7981] device batadv1 entered promiscuous mode [ 477.119618][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'. [ 477.240406][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1004'. [ 477.272633][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'. [ 477.324961][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1004'. [ 477.611573][ T7992] loop0: detected capacity change from 0 to 512 [ 477.634088][ T7992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 477.682332][ T7992] EXT4-fs (loop0): 1 truncate cleaned up [ 477.720202][ T7992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 478.590669][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 479.857242][ T8015] loop4: detected capacity change from 0 to 16 [ 479.881759][ T8013] loop3: detected capacity change from 0 to 8 [ 479.882277][ T8015] erofs: (device loop4): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 479.954138][ T8013] overlayfs: missing 'lowerdir' [ 480.578170][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 480.999635][ T8031] loop4: detected capacity change from 0 to 1024 [ 481.028695][ T8031] hfsplus: request for non-existent node 196608 in B*Tree [ 481.036035][ T8031] hfsplus: request for non-existent node 196608 in B*Tree [ 481.043484][ T8031] hfsplus: failed to load root directory [ 482.141681][ T8038] loop4: detected capacity change from 0 to 1024 [ 482.298074][ T8038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 483.002049][ T8038] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.534742][ T8053] xt_CONNSECMARK: invalid mode: 0 [ 485.306235][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 485.845854][ T8066] loop4: detected capacity change from 0 to 8 [ 485.896575][ T8066] overlayfs: missing 'lowerdir' [ 488.420678][ T8092] loop0: detected capacity change from 0 to 512 [ 488.464420][ T8092] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 488.563957][ T8092] EXT4-fs (loop0): 1 truncate cleaned up [ 488.573193][ T8092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 489.343145][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 489.521602][ T8111] loop0: detected capacity change from 0 to 8 [ 489.570674][ T8111] overlayfs: missing 'lowerdir' [ 492.509962][ T8131] loop1: detected capacity change from 0 to 4096 [ 492.589132][ T8137] loop3: detected capacity change from 0 to 512 [ 492.825312][ T8139] loop2: detected capacity change from 0 to 1024 [ 493.400788][ T8137] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 493.619895][ T8139] hfsplus: request for non-existent node 196608 in B*Tree [ 493.627200][ T8139] hfsplus: request for non-existent node 196608 in B*Tree [ 493.634618][ T8139] hfsplus: failed to load root directory [ 494.000141][ T8137] EXT4-fs (loop3): 1 truncate cleaned up [ 494.016629][ T8137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 495.112406][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 495.364772][ T8155] loop1: detected capacity change from 0 to 8 [ 495.453909][ T8155] overlayfs: missing 'lowerdir' [ 495.650902][ T8161] loop4: detected capacity change from 0 to 2048 [ 495.692285][ T8161] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 495.736003][ T8161] UDF-fs: Scanning with blocksize 512 failed [ 495.785634][ T8161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.980913][ T8189] loop0: detected capacity change from 0 to 4096 [ 500.274010][ T8210] loop0: detected capacity change from 0 to 8 [ 500.367199][ T8210] overlayfs: missing 'lowerdir' [ 501.377812][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.384652][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.530385][ T8229] loop2: detected capacity change from 0 to 764 [ 502.703658][ T8226] rock: directory entry would overflow storage [ 502.731345][ T8226] rock: sig=0x4f50, size=4, remaining=3 [ 502.747330][ T8226] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 503.096202][ T8239] loop3: detected capacity change from 0 to 512 [ 503.109755][ T8239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 503.401117][ T8245] loop2: detected capacity change from 0 to 1024 [ 503.461167][ T8245] hfsplus: request for non-existent node 196608 in B*Tree [ 503.468636][ T8245] hfsplus: request for non-existent node 196608 in B*Tree [ 503.476364][ T8245] hfsplus: failed to load root directory [ 503.539480][ T8239] EXT4-fs (loop3): 1 truncate cleaned up [ 503.580582][ T8239] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 504.530284][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 504.623426][ T8256] loop3: detected capacity change from 0 to 8 [ 504.713222][ T8256] overlayfs: missing 'lowerdir' [ 504.739736][ T8253] loop2: detected capacity change from 0 to 4096 [ 505.254573][ T8265] loop3: detected capacity change from 0 to 1024 [ 505.442642][ T8265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 505.707699][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 507.368801][ T8288] loop2: detected capacity change from 0 to 1024 [ 507.389127][ T8288] hfsplus: request for non-existent node 196608 in B*Tree [ 507.397061][ T8288] hfsplus: request for non-existent node 196608 in B*Tree [ 507.404373][ T8288] hfsplus: failed to load root directory [ 507.617536][ T4261] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 507.637072][ T8291] loop3: detected capacity change from 0 to 512 [ 507.656862][ T8291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 507.980143][ T8291] EXT4-fs (loop3): 1 truncate cleaned up [ 508.003035][ T8291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 508.192596][ T8297] loop4: detected capacity change from 0 to 4096 [ 508.818236][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 509.226474][ T8314] loop2: detected capacity change from 0 to 8 [ 509.292239][ T8314] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 509.339405][ T8314] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 509.580084][ T8300] loop1: detected capacity change from 0 to 32768 [ 509.623542][ T8300] ======================================================= [ 509.623542][ T8300] WARNING: The mand mount option has been deprecated and [ 509.623542][ T8300] and is ignored by this kernel. Remove the mand [ 509.623542][ T8300] option from the mount to silence this warning. [ 509.623542][ T8300] ======================================================= [ 509.780248][ T8300] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 509.781727][ T8322] loop2: detected capacity change from 0 to 1024 [ 510.399211][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 511.495267][ T8342] loop1: detected capacity change from 0 to 16 [ 511.521951][ T8342] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 511.554242][ T8344] loop0: detected capacity change from 0 to 512 [ 511.616485][ T8344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 511.657623][ T8344] EXT4-fs (loop0): 1 truncate cleaned up [ 511.664383][ T8344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 512.479212][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 514.000913][ T8362] loop1: detected capacity change from 0 to 8 [ 514.071951][ T8362] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 514.072025][ T8362] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 514.478041][ T8373] loop0: detected capacity change from 0 to 1024 [ 514.512682][ T8373] hfsplus: request for non-existent node 196608 in B*Tree [ 514.520023][ T8373] hfsplus: request for non-existent node 196608 in B*Tree [ 514.527500][ T8373] hfsplus: failed to load root directory [ 515.584034][ T8381] loop0: detected capacity change from 0 to 512 [ 515.633291][ T8381] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 515.750386][ T8385] loop3: detected capacity change from 0 to 512 [ 515.787505][ T8385] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.871771][ T8381] EXT4-fs (loop0): 1 truncate cleaned up [ 515.877701][ T8381] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 515.903549][ T8385] EXT4-fs (loop3): 1 truncate cleaned up [ 515.931524][ T8385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 516.576818][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 516.809047][ T8403] loop4: detected capacity change from 0 to 8 [ 516.848914][ T8403] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 517.053128][ T8403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 518.194839][ T8414] loop1: detected capacity change from 0 to 2048 [ 518.284976][ T8414] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 518.729279][ T8414] UDF-fs: Scanning with blocksize 512 failed [ 518.898154][ T8421] loop2: detected capacity change from 0 to 1024 [ 518.911681][ T8421] hfsplus: request for non-existent node 196608 in B*Tree [ 518.911743][ T8421] hfsplus: request for non-existent node 196608 in B*Tree [ 518.911834][ T8421] hfsplus: failed to load root directory [ 518.961871][ T8414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.219257][ T4364] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.946201][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 520.968910][ T8436] loop2: detected capacity change from 0 to 512 [ 521.067009][ T8436] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 521.181131][ T8436] EXT4-fs (loop2): 1 truncate cleaned up [ 521.210641][ T8436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 521.788855][ T8450] loop4: detected capacity change from 0 to 8 [ 521.803423][ T8450] overlayfs: missing 'lowerdir' [ 521.858421][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 523.480834][ T8462] loop4: detected capacity change from 0 to 1024 [ 523.698440][ T8468] loop2: detected capacity change from 0 to 1024 [ 523.716043][ T8462] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 523.741343][ T8468] hfsplus: request for non-existent node 196608 in B*Tree [ 523.748614][ T8468] hfsplus: request for non-existent node 196608 in B*Tree [ 523.755954][ T8468] hfsplus: failed to load root directory [ 523.785412][ T8462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 523.850967][ T8462] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 523.939698][ T8462] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.1136: mark_inode_dirty error [ 523.967403][ T8462] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.1136: Invalid block bitmap block 3 in block_group 0 [ 523.992714][ T8462] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 524.003917][ T8462] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.1136: mark_inode_dirty error [ 524.022468][ T8462] Quota error (device loop4): write_blk: dquota write failed [ 524.032221][ T8462] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm syz.4.1136: lblock 6 mapped to illegal pblock 1 (length 1) [ 524.058090][ T8462] Quota error (device loop4): write_blk: dquota write failed [ 524.076297][ T8462] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 524.089701][ T8462] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.1136: lblock 0 mapped to illegal pblock 48 (length 1) [ 524.105246][ T8462] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 524.116421][ T8462] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1136: Failed to acquire dquot type 0 [ 524.128452][ T8462] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm syz.4.1136: lblock 1 mapped to illegal pblock 49 (length 1) [ 524.143215][ T8462] Quota error (device loop4): do_insert_tree: Can't read tree quota block 1 [ 524.153639][ T8462] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 524.185307][ T8462] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.1136: Failed to acquire dquot type 0 [ 524.267449][ T8462] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 524.902809][ T8462] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.1136: mark_inode_dirty error [ 524.991897][ T8462] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 525.034812][ T8462] EXT4-fs (loop4): 1 orphan inode deleted [ 525.041508][ T8462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 525.053333][ T8482] loop2: detected capacity change from 0 to 2048 [ 525.140454][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 525.149699][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 525.162791][ T8484] device bond0 entered promiscuous mode [ 525.168472][ T8484] device bond_slave_0 entered promiscuous mode [ 525.174994][ T8484] device bond_slave_1 entered promiscuous mode [ 525.182434][ T8484] device batadv_slave_1 entered promiscuous mode [ 525.235126][ T8482] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 525.242975][ T8484] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 525.251223][ T8484] Cannot create hsr debugfs directory [ 525.258316][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 525.261029][ T8482] UDF-fs: Scanning with blocksize 512 failed [ 525.277723][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 525.634100][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 525.692754][ T8482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.092408][ T8489] loop3: detected capacity change from 0 to 512 [ 526.135173][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 526.142396][ T8489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.215862][ T8489] EXT4-fs (loop3): 1 truncate cleaned up [ 526.221582][ T8489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 526.241903][ T8495] loop1: detected capacity change from 0 to 8 [ 526.511628][ T8495] overlayfs: missing 'lowerdir' [ 529.050305][ T8524] loop2: detected capacity change from 0 to 1024 [ 529.062130][ T8524] hfsplus: request for non-existent node 196608 in B*Tree [ 529.069496][ T8524] hfsplus: request for non-existent node 196608 in B*Tree [ 529.077111][ T8524] hfsplus: failed to load root directory [ 530.591824][ T8536] loop2: detected capacity change from 0 to 1024 [ 530.664122][ T8536] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 530.719496][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 531.014090][ T8536] EXT4-fs (loop2): orphan cleanup on readonly fs [ 531.281764][ T8536] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 531.303714][ T8536] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #3: comm syz.2.1158: mark_inode_dirty error [ 531.325824][ T8539] device batadv1 entered promiscuous mode [ 531.415202][ T8536] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1158: Invalid block bitmap block 3 in block_group 0 [ 531.463631][ T8536] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 531.473669][ T8536] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #3: comm syz.2.1158: mark_inode_dirty error [ 531.488088][ T8536] Quota error (device loop2): write_blk: dquota write failed [ 531.497339][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1159'. [ 531.512219][ T8536] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm syz.2.1158: lblock 6 mapped to illegal pblock 1 (length 1) [ 531.526818][ T8543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1159'. [ 531.584859][ T8536] Quota error (device loop2): write_blk: dquota write failed [ 531.613707][ T8536] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 531.653948][ T8543] device bridge0 entered promiscuous mode [ 531.682919][ T8543] device bridge0 left promiscuous mode [ 531.722459][ T8536] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 48: comm syz.2.1158: lblock 0 mapped to illegal pblock 48 (length 1) [ 532.145672][ T8536] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 532.164845][ T8536] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.1158: Failed to acquire dquot type 0 [ 532.206389][ T8536] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 49: comm syz.2.1158: lblock 1 mapped to illegal pblock 49 (length 1) [ 532.221031][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1159'. [ 532.240755][ T8543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1159'. [ 532.252436][ T8536] Quota error (device loop2): do_insert_tree: Can't read tree quota block 1 [ 532.275142][ T8536] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 532.289531][ T8543] device bridge0 entered promiscuous mode [ 532.294273][ T8536] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.1158: Failed to acquire dquot type 0 [ 532.324289][ T8536] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 532.324305][ T8543] device bridge0 left promiscuous mode [ 532.373176][ T8536] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #15: comm syz.2.1158: mark_inode_dirty error [ 532.411635][ T8536] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 532.429588][ T8536] EXT4-fs (loop2): 1 orphan inode deleted [ 532.464574][ T8536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 532.652431][ T8536] syz.2.1158 (8536) used greatest stack depth: 18912 bytes left [ 532.739365][ T8561] loop1: detected capacity change from 0 to 512 [ 532.749702][ T8561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 532.784395][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 532.796002][ T8561] EXT4-fs (loop1): 1 truncate cleaned up [ 532.824138][ T8561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 534.015117][ T8575] loop2: detected capacity change from 0 to 64 [ 534.101571][ T8575] hfs: unable to locate alternate MDB [ 534.107125][ T8575] hfs: continuing without an alternate MDB [ 535.731224][ T8586] loop2: detected capacity change from 0 to 4096 [ 535.797244][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 536.020755][ T8592] loop1: detected capacity change from 0 to 8 [ 536.336840][ T8592] overlayfs: missing 'workdir' [ 537.081720][ T8597] sctp: failed to load transform for md5: -2 [ 537.396210][ T8611] loop3: detected capacity change from 0 to 512 [ 537.506629][ T8611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 537.569835][ T8611] EXT4-fs (loop3): 1 truncate cleaned up [ 537.589806][ T8611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 538.492552][ T8625] loop1: detected capacity change from 0 to 512 [ 538.530531][ T8625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 538.631993][ T8625] EXT4-fs (loop1): 1 truncate cleaned up [ 538.653205][ T8625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 540.241933][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 541.787214][ T8651] loop2: detected capacity change from 0 to 4096 [ 542.233858][ T8648] loop0: detected capacity change from 0 to 16 [ 542.431757][ T8648] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 543.282049][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 543.336850][ T8664] device batadv1 entered promiscuous mode [ 543.465381][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 543.513270][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 543.695045][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 543.734437][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 544.119024][ T8682] loop0: detected capacity change from 0 to 512 [ 544.164305][ T8682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 544.232577][ T8682] EXT4-fs (loop0): 1 truncate cleaned up [ 544.241568][ T8682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 545.273354][ T8691] loop2: detected capacity change from 0 to 8 [ 545.331526][ T8691] overlayfs: missing 'workdir' [ 547.040183][ T8708] loop3: detected capacity change from 0 to 4096 [ 547.092112][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 547.440486][ T8715] loop2: detected capacity change from 0 to 512 [ 547.802188][ T8715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 548.001035][ T8715] EXT4-fs (loop2): 1 truncate cleaned up [ 548.030951][ T8715] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 548.667647][ T8730] loop0: detected capacity change from 0 to 8 [ 548.709839][ T8710] loop1: detected capacity change from 0 to 16 [ 548.742187][ T8710] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 550.453545][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 550.472695][ T8749] loop1: detected capacity change from 0 to 512 [ 550.502808][ T8749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 550.553216][ T8749] EXT4-fs (loop1): 1 truncate cleaned up [ 550.574833][ T8749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 552.745285][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 553.012865][ T8767] device batadv1 entered promiscuous mode [ 553.135135][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 553.181268][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 553.206650][ T8775] loop3: detected capacity change from 0 to 8 [ 553.228685][ T8771] device bridge0 entered promiscuous mode [ 553.265115][ T8771] device bridge0 left promiscuous mode [ 553.355812][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 553.394647][ T8771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 553.442266][ T8771] device bridge0 entered promiscuous mode [ 553.458753][ T8771] device bridge0 left promiscuous mode [ 555.996279][ T8798] loop3: detected capacity change from 0 to 512 [ 556.030990][ T8798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 556.094668][ T8798] EXT4-fs (loop3): 1 truncate cleaned up [ 556.103864][ T8798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 556.980895][ T8811] loop2: detected capacity change from 0 to 512 [ 557.004749][ T8811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 557.216839][ T8811] EXT4-fs (loop2): 1 truncate cleaned up [ 557.244510][ T8811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 558.494398][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 558.554586][ T8820] overlayfs: failed to clone upperpath [ 559.832864][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 562.384932][ T8861] loop1: detected capacity change from 0 to 4096 [ 562.816468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.822900][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.969412][ T8869] loop2: detected capacity change from 0 to 8 [ 567.693246][ T8917] loop3: detected capacity change from 0 to 8 [ 568.377981][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 568.419875][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1259'. [ 568.516113][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 568.542079][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1259'. [ 570.624861][ T8936] loop0: detected capacity change from 0 to 16 [ 570.639290][ T8936] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 570.725467][ T4261] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 571.960668][ T8955] loop0: detected capacity change from 0 to 8 [ 572.740757][ T8966] loop0: detected capacity change from 0 to 512 [ 572.757571][ T8966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 572.935555][ T8966] EXT4-fs (loop0): 1 truncate cleaned up [ 572.966498][ T8966] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 574.193628][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 578.458464][ T9020] loop0: detected capacity change from 0 to 4096 [ 578.512487][ T9022] loop2: detected capacity change from 0 to 16 [ 578.520919][ T9022] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 578.585412][ T4364] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.592228][ C0] hrtimer: interrupt took 75293 ns [ 582.623827][ T9063] loop1: detected capacity change from 0 to 512 [ 582.652658][ T9063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 582.693813][ T9063] EXT4-fs (loop1): 1 truncate cleaned up [ 582.700370][ T9063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 583.831651][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 584.265925][ T9079] loop1: detected capacity change from 0 to 4096 [ 587.105905][ T9107] loop2: detected capacity change from 0 to 2048 [ 587.235418][ T9107] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 587.262524][ T9107] UDF-fs: Scanning with blocksize 512 failed [ 587.293851][ T9107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 588.922056][ T9124] loop2: detected capacity change from 0 to 764 [ 589.108227][ T9124] rock: directory entry would overflow storage [ 589.114692][ T9124] rock: sig=0x4f50, size=4, remaining=3 [ 589.120317][ T9124] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 590.150000][ T9134] loop3: detected capacity change from 0 to 4096 [ 592.106276][ T9150] loop2: detected capacity change from 0 to 16 [ 592.165931][ T9150] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 592.277905][ T4261] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 594.119253][ T9168] loop0: detected capacity change from 0 to 512 [ 594.194960][ T9168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 594.284791][ T9168] EXT4-fs (loop0): 1 truncate cleaned up [ 594.309247][ T9168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 594.570370][ T9181] loop1: detected capacity change from 0 to 764 [ 594.610113][ T9181] rock: directory entry would overflow storage [ 594.616459][ T9181] rock: sig=0x4f50, size=4, remaining=3 [ 594.622165][ T9181] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 595.923903][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 596.724078][ T9196] loop1: detected capacity change from 0 to 2048 [ 597.583892][ T9196] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 597.664307][ T9196] UDF-fs: Scanning with blocksize 512 failed [ 597.664362][ T9200] fuse: Bad value for 'fd' [ 597.733475][ T9196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.768539][ T9237] loop3: detected capacity change from 0 to 4096 [ 601.983763][ T9248] loop1: detected capacity change from 0 to 2048 [ 601.992552][ T9253] device batadv1 entered promiscuous mode [ 602.056016][ T9248] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 602.058392][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 602.070023][ T9248] UDF-fs: Scanning with blocksize 512 failed [ 602.083669][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 602.096521][ T9248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.109688][ T9258] loop3: detected capacity change from 0 to 512 [ 602.130338][ T9258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 602.285900][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 602.306926][ T9258] EXT4-fs (loop3): 1 truncate cleaned up [ 602.313813][ T9258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 602.326868][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 605.567092][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 608.176036][ T9313] loop0: detected capacity change from 0 to 764 [ 608.306590][ T9313] rock: directory entry would overflow storage [ 608.312830][ T9313] rock: sig=0x4f50, size=4, remaining=3 [ 608.318439][ T9313] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 608.660792][ T9319] device batadv1 entered promiscuous mode [ 608.723040][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1361'. [ 608.763167][ T9322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 608.800692][ T9322] device bond0 entered promiscuous mode [ 608.809669][ T9322] device bond_slave_0 entered promiscuous mode [ 608.819520][ T9322] device bond_slave_1 entered promiscuous mode [ 608.828036][ T9322] device batadv_slave_1 entered promiscuous mode [ 608.835678][ T9322] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 608.843679][ T9322] Cannot create hsr debugfs directory [ 608.851691][ T9322] device bond0 left promiscuous mode [ 608.862101][ T9322] device bond_slave_0 left promiscuous mode [ 608.871711][ T9322] device bond_slave_1 left promiscuous mode [ 608.888194][ T9322] device batadv_slave_1 left promiscuous mode [ 609.888580][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1361'. [ 609.906935][ T9330] loop2: detected capacity change from 0 to 512 [ 609.913991][ T9322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1361'. [ 610.127089][ T9322] device bond0 entered promiscuous mode [ 610.133149][ T9322] device bond_slave_0 entered promiscuous mode [ 610.140555][ T9330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 610.152054][ T9322] device bond_slave_1 entered promiscuous mode [ 610.168093][ T9322] device batadv_slave_1 entered promiscuous mode [ 610.179341][ T9330] EXT4-fs (loop2): 1 truncate cleaned up [ 610.186932][ T9322] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 610.194074][ T9330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 610.199173][ T9322] Cannot create hsr debugfs directory [ 610.218337][ T9322] device bond0 left promiscuous mode [ 610.228084][ T9322] device bond_slave_0 left promiscuous mode [ 610.236649][ T9322] device bond_slave_1 left promiscuous mode [ 610.253526][ T9322] device batadv_slave_1 left promiscuous mode [ 611.213971][ T9349] loop0: detected capacity change from 0 to 16 [ 611.223201][ T9349] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 611.265260][ T4261] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.721966][ T9360] loop3: detected capacity change from 0 to 4096 [ 615.454762][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 615.495572][ T9387] device batadv1 entered promiscuous mode [ 615.706203][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1381'. [ 615.731699][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 615.885473][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1381'. [ 615.907746][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 617.086765][ T9406] loop1: detected capacity change from 0 to 64 [ 617.647095][ T9406] hfs: unable to locate alternate MDB [ 617.652547][ T9406] hfs: continuing without an alternate MDB [ 618.381604][ T9410] loop0: detected capacity change from 0 to 4096 [ 620.589360][ T9436] loop0: detected capacity change from 0 to 512 [ 620.699428][ T9436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 620.762553][ T9436] EXT4-fs (loop0): 1 truncate cleaned up [ 620.777109][ T9436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 622.357915][ T9457] loop3: detected capacity change from 0 to 1024 [ 622.371995][ T9457] hfsplus: request for non-existent node 196608 in B*Tree [ 622.379306][ T9457] hfsplus: request for non-existent node 196608 in B*Tree [ 622.387235][ T9457] hfsplus: failed to load root directory [ 622.438461][ T4261] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.455309][ T9465] loop2: detected capacity change from 0 to 64 [ 623.476345][ T9465] hfs: unable to locate alternate MDB [ 623.481789][ T9465] hfs: continuing without an alternate MDB [ 624.265457][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.277627][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.819186][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 627.850258][ T9503] device batadv1 entered promiscuous mode [ 628.013144][ T9509] loop2: detected capacity change from 0 to 512 [ 628.023172][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1410'. [ 628.062232][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1410'. [ 628.108897][ T9509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 628.261045][ T9509] EXT4-fs (loop2): 1 truncate cleaned up [ 628.284790][ T9509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 628.594759][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1410'. [ 628.610600][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1410'. [ 629.393390][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 630.620488][ T9535] loop2: detected capacity change from 0 to 512 [ 630.666243][ T9535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 630.703683][ T9535] EXT4-fs (loop2): 1 truncate cleaned up [ 630.720817][ T9535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 631.612015][ T9546] loop1: detected capacity change from 0 to 2048 [ 631.689435][ T9546] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 631.725181][ T9546] UDF-fs: Scanning with blocksize 512 failed [ 631.932789][ T9546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.671284][ T9564] loop3: detected capacity change from 0 to 1024 [ 633.697873][ T9564] hfsplus: request for non-existent node 196608 in B*Tree [ 633.705296][ T9564] hfsplus: request for non-existent node 196608 in B*Tree [ 633.712507][ T9564] hfsplus: failed to load root directory [ 634.016977][ T9570] loop3: detected capacity change from 0 to 512 [ 634.421698][ T9570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 634.473372][ T9570] EXT4-fs (loop3): 1 truncate cleaned up [ 635.235405][ T9570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 635.459721][ T9582] device batadv1 entered promiscuous mode [ 635.871542][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 635.884390][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'. [ 635.930949][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1429'. [ 636.214690][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'. [ 636.259597][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1429'. [ 636.285628][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 637.683964][ T9602] loop1: detected capacity change from 0 to 2048 [ 637.799024][ T9602] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 637.874514][ T9602] UDF-fs: Scanning with blocksize 512 failed [ 638.502381][ T9602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.579890][ T9649] loop1: detected capacity change from 0 to 64 [ 643.025509][ T9649] hfs: unable to locate alternate MDB [ 643.030990][ T9649] hfs: continuing without an alternate MDB [ 643.403134][ T9641] device batadv1 entered promiscuous mode [ 643.474233][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1443'. [ 643.529619][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 644.605123][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1443'. [ 644.631397][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 644.731564][ T9664] loop1: detected capacity change from 0 to 764 [ 644.878987][ T9664] rock: directory entry would overflow storage [ 644.918350][ T9664] rock: sig=0x4f50, size=4, remaining=3 [ 644.923989][ T9664] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 645.130836][ T9667] loop2: detected capacity change from 0 to 2048 [ 645.211622][ T9667] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 645.249316][ T9667] UDF-fs: Scanning with blocksize 512 failed [ 645.280483][ T9667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.856441][ T9682] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 650.913463][ T9716] loop2: detected capacity change from 0 to 64 [ 650.983161][ T9716] hfs: unable to locate alternate MDB [ 650.988747][ T9716] hfs: continuing without an alternate MDB [ 652.420269][ T9725] loop2: detected capacity change from 0 to 2048 [ 652.564875][ T9725] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 652.582847][ T9725] UDF-fs: Scanning with blocksize 512 failed [ 652.619717][ T9725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.686779][ T9731] loop3: detected capacity change from 0 to 1024 [ 652.815485][ T9731] hfsplus: request for non-existent node 196608 in B*Tree [ 652.847533][ T9731] hfsplus: request for non-existent node 196608 in B*Tree [ 652.869751][ T9731] hfsplus: failed to load root directory [ 654.860755][ T9751] loop1: detected capacity change from 0 to 512 [ 654.885859][ T9751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 655.221085][ T9751] EXT4-fs (loop1): 1 truncate cleaned up [ 655.283403][ T9751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 658.235739][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 659.858758][ T9779] loop1: detected capacity change from 0 to 4096 [ 662.665080][ T9781] loop3: detected capacity change from 0 to 32768 [ 663.005179][ T9781] (syz.3.1479,9781,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 664.350376][ T9781] (syz.3.1479,9781,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 665.120817][ T9816] loop2: detected capacity change from 0 to 512 [ 665.129163][ T9816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 665.173739][ T9816] EXT4-fs (loop2): 1 truncate cleaned up [ 665.616158][ T9816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 666.253973][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 666.283224][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 668.061760][ T9828] device bond0 entered promiscuous mode [ 668.074329][ T9828] device bond_slave_0 entered promiscuous mode [ 668.085369][ T9828] device bond_slave_1 entered promiscuous mode [ 668.134672][ T9828] device batadv_slave_1 entered promiscuous mode [ 668.210341][ T9828] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 668.224381][ T9828] Cannot create hsr debugfs directory [ 668.233912][ T5739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 668.248537][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 668.277522][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 668.766756][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 673.235302][ T9872] loop0: detected capacity change from 0 to 1024 [ 673.451342][ T9872] hfsplus: request for non-existent node 196608 in B*Tree [ 674.268847][ T9882] loop1: detected capacity change from 0 to 764 [ 675.883142][ T9872] hfsplus: request for non-existent node 196608 in B*Tree [ 675.921994][ T9879] rock: directory entry would overflow storage [ 675.934564][ T9879] rock: sig=0x4f50, size=4, remaining=3 [ 675.940170][ T9879] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 675.949964][ T9872] hfsplus: failed to load root directory [ 676.219332][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 676.244410][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 677.089229][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 677.124264][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 679.069437][ T9896] No source specified [ 679.395273][ T9910] loop2: detected capacity change from 0 to 512 [ 679.506226][ T9910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 679.640323][ T9910] EXT4-fs (loop2): 1 truncate cleaned up [ 679.668740][ T9910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 681.052455][ T9930] overlayfs: failed to clone upperpath [ 683.313926][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 683.334371][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 683.394643][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 683.438893][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 683.971270][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 685.697468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.703901][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.170121][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 687.194280][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 687.373398][ T9990] device bond0 entered promiscuous mode [ 687.413210][ T9990] device bond_slave_0 entered promiscuous mode [ 687.460324][ T9990] device bond_slave_1 entered promiscuous mode [ 687.518497][ T9990] device batadv_slave_1 entered promiscuous mode [ 687.547987][ T9996] loop1: detected capacity change from 0 to 512 [ 687.565863][ T9990] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 687.639336][ T9996] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 687.650765][ T9990] Cannot create hsr debugfs directory [ 687.677601][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 687.713299][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 687.723822][ T9996] EXT4-fs (loop1): 1 truncate cleaned up [ 687.730818][ T9996] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 687.881538][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 688.349744][T10005] loop3: detected capacity change from 0 to 1024 [ 688.506482][T10005] hfsplus: request for non-existent node 196608 in B*Tree [ 688.513719][T10005] hfsplus: request for non-existent node 196608 in B*Tree [ 688.521014][T10005] hfsplus: failed to load root directory [ 688.592235][ T4261] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 688.828635][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 691.647127][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 691.679359][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 691.755441][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 691.779075][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 694.713268][T10082] loop2: detected capacity change from 0 to 64 [ 696.208422][T10082] hfs: unable to locate alternate MDB [ 696.213857][T10082] hfs: continuing without an alternate MDB [ 696.482543][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1566'. [ 696.534379][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1566'. [ 696.607815][T10087] device netdevsim0 entered promiscuous mode [ 696.655287][T10087] device ip6gretap0 entered promiscuous mode [ 696.775536][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 697.070242][ T4264] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 697.487386][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1570'. [ 697.524276][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1570'. [ 697.598771][T10100] device bridge0 entered promiscuous mode [ 697.656423][T10100] device bridge0 left promiscuous mode [ 698.445220][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1570'. [ 698.467999][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1570'. [ 698.511045][T10100] device bridge0 entered promiscuous mode [ 698.512242][T10100] device bridge0 left promiscuous mode [ 701.154374][ T4264] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 701.164797][ T4264] Bluetooth: hci1: Injecting HCI hardware error event [ 701.177774][ T4264] Bluetooth: hci1: hardware error 0x00 [ 702.394580][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 702.432146][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 702.665803][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 702.714521][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 703.294409][ T4264] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 705.187611][T10186] loop1: detected capacity change from 0 to 512 [ 705.205863][T10186] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 705.458551][T10186] EXT4-fs (loop1): 1 truncate cleaned up [ 705.491431][T10191] loop0: detected capacity change from 0 to 64 [ 705.499093][T10186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 705.524802][T10191] hfs: unable to locate alternate MDB [ 705.530269][T10191] hfs: continuing without an alternate MDB [ 706.542095][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 707.896607][T10217] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 708.933788][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 711.066682][T10241] loop3: detected capacity change from 0 to 64 [ 711.079592][T10241] hfs: unable to locate alternate MDB [ 711.085109][T10241] hfs: continuing without an alternate MDB [ 714.044482][T10274] loop1: detected capacity change from 0 to 1024 [ 714.054202][T10274] hfsplus: request for non-existent node 196608 in B*Tree [ 714.061400][T10274] hfsplus: request for non-existent node 196608 in B*Tree [ 714.068709][T10274] hfsplus: failed to load root directory [ 714.123489][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 714.170168][T10280] loop2: detected capacity change from 0 to 512 [ 714.181391][T10280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 714.538571][T10280] EXT4-fs (loop2): 1 truncate cleaned up [ 714.588909][T10280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 715.134569][T10289] loop0: detected capacity change from 0 to 512 [ 715.178188][T10289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 715.355243][T10289] EXT4-fs (loop0): 1 truncate cleaned up [ 715.361129][T10289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 715.460154][T10298] loop1: detected capacity change from 0 to 64 [ 715.479827][T10298] hfs: unable to locate alternate MDB [ 715.485376][T10298] hfs: continuing without an alternate MDB [ 716.372404][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 719.015866][ T6542] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 719.113621][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 719.234262][ T6542] usb 1-1: Using ep0 maxpacket: 16 [ 719.253466][ T6542] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 719.286919][ T6542] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.341193][ T6542] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 719.375684][ T6542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.383828][ T6542] usb 1-1: Product: syz [ 719.404894][ T6542] usb 1-1: Manufacturer: syz [ 719.414389][ T6542] usb 1-1: SerialNumber: syz [ 719.421759][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 719.455205][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 719.575663][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 719.603086][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 719.670006][ T6542] usb 1-1: 0:2 : does not exist [ 719.700211][ T6542] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 719.728839][ T6542] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 719.757210][ T6542] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 719.798259][ T6542] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 720.019705][ T6542] usb 1-1: USB disconnect, device number 2 [ 724.510509][T10384] loop0: detected capacity change from 0 to 1024 [ 724.607895][T10384] hfsplus: request for non-existent node 196608 in B*Tree [ 724.622831][T10384] hfsplus: request for non-existent node 196608 in B*Tree [ 724.642052][T10384] hfsplus: failed to load root directory [ 724.820746][T10392] device batadv1 entered promiscuous mode [ 724.858011][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1656'. [ 724.881024][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1656'. [ 724.974965][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1656'. [ 725.020485][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1656'. [ 725.213143][T10400] loop0: detected capacity change from 0 to 1024 [ 726.159498][T10400] hfsplus: request for non-existent node 196608 in B*Tree [ 726.177047][T10400] hfsplus: request for non-existent node 196608 in B*Tree [ 726.194634][T10400] hfsplus: failed to load root directory [ 730.152867][T10448] loop1: detected capacity change from 0 to 64 [ 730.179310][T10448] hfs: unable to locate alternate MDB [ 730.184826][T10448] hfs: continuing without an alternate MDB [ 731.789712][T10461] loop3: detected capacity change from 0 to 1024 [ 731.900796][T10461] hfsplus: request for non-existent node 196608 in B*Tree [ 731.915215][T10461] hfsplus: request for non-existent node 196608 in B*Tree [ 731.932332][T10461] hfsplus: failed to load root directory [ 732.058183][ T7470] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 733.605350][ T7470] usb 1-1: Using ep0 maxpacket: 8 [ 733.612824][ T7470] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.623324][ T7470] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.634515][ T7470] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 733.706107][ T7470] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.720970][ T7470] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.736811][ T7470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.958042][ T7470] usb 1-1: usb_control_msg returned -32 [ 733.965260][ T7470] usbtmc 1-1:16.0: can't read capabilities [ 734.100025][T10483] loop2: detected capacity change from 0 to 512 [ 734.138450][T10483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 734.197723][T10483] EXT4-fs (loop2): 1 truncate cleaned up [ 734.213954][T10483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 734.429184][T10488] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 734.495715][ T6542] usb 1-1: USB disconnect, device number 3 [ 735.246418][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 739.719632][T10533] loop2: detected capacity change from 0 to 64 [ 739.765071][T10533] hfs: unable to locate alternate MDB [ 739.770519][T10533] hfs: continuing without an alternate MDB [ 743.018634][T10566] loop3: detected capacity change from 0 to 764 [ 743.052805][T10566] rock: directory entry would overflow storage [ 743.059377][T10566] rock: sig=0x4f50, size=4, remaining=3 [ 743.065100][T10566] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 744.932240][ T4264] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 746.441855][T10600] loop2: detected capacity change from 0 to 64 [ 746.461737][T10600] hfs: unable to locate alternate MDB [ 746.467272][T10600] hfs: continuing without an alternate MDB [ 746.719002][T10609] loop2: detected capacity change from 0 to 512 [ 746.750988][T10609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 746.822762][T10609] EXT4-fs (loop2): 1 truncate cleaned up [ 746.846976][T10609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 747.142576][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.149109][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.918818][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 751.657901][T10660] loop3: detected capacity change from 0 to 512 [ 751.745183][T10660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 751.815342][T10660] EXT4-fs (loop3): 1 truncate cleaned up [ 751.822446][T10660] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 752.391718][T10667] loop2: detected capacity change from 0 to 512 [ 752.547629][T10667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 752.627223][T10667] EXT4-fs (loop2): 1 truncate cleaned up [ 752.693584][T10667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 753.752984][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 755.962498][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 756.005292][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 756.044237][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 756.215011][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 756.254781][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1743'. [ 756.378469][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 756.913838][T10707] loop1: detected capacity change from 0 to 64 [ 756.914696][T10707] hfs: unable to parse mount options [ 757.914500][ T7470] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 758.306509][ T7470] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 758.334339][ T7470] usb 2-1: config 0 has no interface number 0 [ 758.364133][ T7470] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 758.425529][ T7470] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 758.472245][ T7470] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 759.915280][ T7470] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 759.925099][ T7470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.933212][ T7470] usb 2-1: Product: syz [ 759.939415][ T7470] usb 2-1: Manufacturer: syz [ 759.944224][ T7470] usb 2-1: SerialNumber: syz [ 759.968794][ T7470] usb 2-1: config 0 descriptor?? [ 759.978129][T10715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 760.034534][T10715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 760.069152][ T7470] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 760.108681][ T7470] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 760.491573][ T6542] usb 2-1: USB disconnect, device number 2 [ 760.564944][ T6542] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 760.615371][T10751] loop2: detected capacity change from 0 to 64 [ 760.622386][T10751] hfs: unable to parse mount options [ 760.650571][ T6542] cyberjack 2-1:0.69: device disconnected [ 761.045611][ T4364] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 764.500418][T10793] loop1: detected capacity change from 0 to 64 [ 764.507737][T10793] hfs: unable to parse mount options [ 764.883851][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 765.659252][T10806] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0 [ 765.906475][ T6526] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 766.116505][ T6526] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 766.168182][ T6526] usb 1-1: config 0 has no interface number 0 [ 766.273347][ T6526] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 766.486698][ T6526] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 766.687613][ T6526] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 766.872403][ T6526] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 766.893248][ T6526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.901674][ T6526] usb 1-1: Product: syz [ 766.906172][ T6526] usb 1-1: Manufacturer: syz [ 766.910792][ T6526] usb 1-1: SerialNumber: syz [ 766.919914][ T6526] usb 1-1: config 0 descriptor?? [ 766.927165][T10791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.951828][T10791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.985759][ T6526] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 767.004505][ T6526] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 767.398489][ T7470] usb 1-1: USB disconnect, device number 4 [ 767.424855][ T7470] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 767.441179][T10822] loop1: detected capacity change from 0 to 512 [ 767.458547][ T7470] cyberjack 1-1:0.69: device disconnected [ 767.469624][T10822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 767.540438][T10822] EXT4-fs (loop1): 1 truncate cleaned up [ 767.548654][T10822] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 769.455288][T10847] loop0: detected capacity change from 0 to 64 [ 769.492573][T10847] hfs: unable to locate alternate MDB [ 769.498096][T10847] hfs: continuing without an alternate MDB [ 770.393132][T10851] loop0: detected capacity change from 0 to 512 [ 770.425141][T10851] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 770.581409][T10851] EXT4-fs (loop0): 1 truncate cleaned up [ 770.587651][T10851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 770.616742][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 772.747851][T10871] loop3: detected capacity change from 0 to 512 [ 773.015785][T10871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 773.067515][T10871] EXT4-fs (loop3): 1 truncate cleaned up [ 773.095640][T10871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 774.154946][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 774.583058][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 776.776420][T10898] loop3: detected capacity change from 0 to 64 [ 777.456417][T10898] hfs: unable to locate alternate MDB [ 777.461871][T10898] hfs: continuing without an alternate MDB [ 777.817954][T10906] loop0: detected capacity change from 0 to 512 [ 777.894758][T10906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 777.941961][T10906] EXT4-fs (loop0): 1 truncate cleaned up [ 777.952082][T10906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 778.074259][ T7469] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 778.294356][ T7469] usb 3-1: Using ep0 maxpacket: 32 [ 778.326519][ T7469] usb 3-1: config 8 has an invalid interface number: 203 but max is 0 [ 778.364623][ T7469] usb 3-1: config 8 has no interface number 0 [ 778.399315][ T7469] usb 3-1: config 8 interface 203 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 778.427019][ T7469] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 778.459080][ T7469] usb 3-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 778.491889][ T7469] usb 3-1: config 8 interface 203 has no altsetting 0 [ 778.528513][ T7469] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 778.550594][ T7469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.578438][ T7469] usb 3-1: Product: syz [ 778.592348][ T7469] usb 3-1: Manufacturer: syz [ 778.614100][ T7469] usb 3-1: SerialNumber: syz [ 778.621613][T10907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 778.629741][T10907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 778.867983][ T7469] port100 3-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 778.921962][ T7469] usb 3-1: USB disconnect, device number 2 [ 784.727914][T10967] loop1: detected capacity change from 0 to 1024 [ 784.741585][T10967] hfsplus: request for non-existent node 196608 in B*Tree [ 784.748883][T10967] hfsplus: request for non-existent node 196608 in B*Tree [ 784.756158][T10967] hfsplus: failed to load root directory [ 784.858402][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 784.972278][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 788.390278][T11009] loop2: detected capacity change from 0 to 512 [ 788.413072][T11009] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 788.463819][T11013] loop0: detected capacity change from 0 to 1024 [ 788.473407][T11013] hfsplus: request for non-existent node 196608 in B*Tree [ 788.481473][T11013] hfsplus: request for non-existent node 196608 in B*Tree [ 788.489034][T11013] hfsplus: failed to load root directory [ 788.511945][T11009] EXT4-fs (loop2): 1 truncate cleaned up [ 788.596231][T11009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 789.024171][ T7469] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 789.498141][ T7469] usb 1-1: string descriptor 0 read error: -22 [ 789.541415][ T7469] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 789.681966][ T7469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.920824][ T7469] usb 1-1: config 0 descriptor?? [ 789.975613][ T7469] usbtest 1-1:0.0: FX2 device [ 789.992458][ T7469] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 790.174928][ T7469] usb 1-1: USB disconnect, device number 5 [ 791.128025][T11041] loop0: detected capacity change from 0 to 512 [ 791.179569][T11041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 791.226723][T11041] EXT4-fs (loop0): 1 truncate cleaned up [ 791.232437][T11041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 792.078789][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 792.156220][T11046] loop3: detected capacity change from 0 to 4096 [ 793.615086][T11063] netlink: 'syz.1.1845': attribute type 39 has an invalid length. [ 793.693461][T11063] device veth0_macvtap left promiscuous mode [ 794.401459][T11074] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0 [ 795.888572][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 796.500446][T11098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1853'. [ 797.144161][ T7469] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 798.700686][ T4264] Bluetooth: hci2: unexpected event for opcode 0x100c [ 798.710235][ T7469] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 798.737624][ T7469] usb 2-1: config 0 has no interface number 0 [ 798.780681][ T7469] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 798.810566][ T7469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.888355][ T7469] usb 2-1: config 0 descriptor?? [ 798.958587][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 799.131871][ T6542] usb 2-1: USB disconnect, device number 3 [ 801.096733][T11144] loop0: detected capacity change from 0 to 1024 [ 801.125127][T11144] hfsplus: request for non-existent node 196608 in B*Tree [ 801.132416][T11144] hfsplus: request for non-existent node 196608 in B*Tree [ 801.139986][T11144] hfsplus: failed to load root directory [ 802.085091][T11151] ubi0: attaching mtd0 [ 802.089621][T11151] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 802.294570][T11151] x_tables: ip_tables: osf match: only valid for protocol 6 [ 807.859842][T11199] loop2: detected capacity change from 0 to 1024 [ 807.876650][T11199] hfsplus: request for non-existent node 196608 in B*Tree [ 807.883900][T11199] hfsplus: request for non-existent node 196608 in B*Tree [ 807.891318][T11199] hfsplus: failed to load root directory [ 808.225546][T11208] loop2: detected capacity change from 0 to 512 [ 808.246691][T11208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 808.579953][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.595173][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.955495][T11208] EXT4-fs (loop2): 1 truncate cleaned up [ 808.973037][T11208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 813.450762][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'. [ 813.459778][T11258] macsec0: default FDB implementation only supports local addresses [ 814.980241][T11276] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1905'. [ 815.008694][T11276] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1905'. [ 815.039743][T11275] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1905'. [ 815.256071][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 817.054741][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1908'. [ 817.174593][T11299] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 817.577554][T11293] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 817.704230][ T6526] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 817.804249][T11293] device wlan1 entered promiscuous mode [ 817.819964][T11293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 817.830504][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 817.858204][T11306] device batadv1 entered promiscuous mode [ 817.879513][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 817.899147][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 817.920800][ T6526] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 817.938940][ T6526] usb 3-1: config 0 has no interface number 0 [ 817.958679][ T6526] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 817.978503][ T6526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.987217][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 818.008599][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 818.009404][ T6526] usb 3-1: config 0 descriptor?? [ 818.308596][ T6526] usb 3-1: USB disconnect, device number 3 [ 820.106552][T11320] overlayfs: failed to clone upperpath [ 820.501788][T11319] device wireguard0 entered promiscuous mode [ 820.854951][T11332] loop2: detected capacity change from 0 to 764 [ 821.118392][T11332] rock: directory entry would overflow storage [ 821.125055][T11332] rock: sig=0x4f50, size=4, remaining=3 [ 821.130842][T11332] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 821.318571][T11330] loop1: detected capacity change from 0 to 512 [ 821.598066][T11330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 821.685547][T11330] EXT4-fs (loop1): 1 truncate cleaned up [ 821.691261][T11330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 821.852957][T11340] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 821.914383][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'. [ 822.992176][T11340] bridge0: port 3(bond0) entered blocking state [ 823.044499][T11340] bridge0: port 3(bond0) entered disabled state [ 823.066951][T11340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 823.343552][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 824.726507][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 827.466388][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 827.475416][T11392] macsec0: default FDB implementation only supports local addresses [ 828.245122][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 830.153068][T11416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 830.267773][T11416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 830.278240][T11416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 830.295789][T11416] device bridge_slave_0 left promiscuous mode [ 830.311457][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.840806][T11432] fuse: Bad value for 'fd' [ 834.140653][T11416] device bridge_slave_1 left promiscuous mode [ 834.153873][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.316662][T11416] bond0: (slave bond_slave_0): Releasing backup interface [ 834.335154][T11416] device bond_slave_0 left promiscuous mode [ 835.121697][T11416] bond0: (slave bond_slave_1): Releasing backup interface [ 835.129639][T11416] device bond_slave_1 left promiscuous mode [ 835.190552][T11450] loop1: detected capacity change from 0 to 512 [ 835.209349][T11450] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 835.210009][T11416] team0: Port device team_slave_0 removed [ 835.261613][T11416] team0: Port device team_slave_1 removed [ 835.276728][T11450] EXT4-fs (loop1): 1 truncate cleaned up [ 835.283122][T11416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.290917][T11450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 835.300026][T11416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.311620][T11416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.344165][T11416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.361167][T11416] bond0: (slave wlan1): Releasing backup interface [ 835.510857][T11416] device wlan1 left promiscuous mode [ 835.863650][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 836.525479][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 836.590166][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 836.593587][T11461] loop3: detected capacity change from 0 to 512 [ 836.717236][T11461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 837.232912][T11470] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 837.241906][T11470] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 839.036308][ T6542] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 839.047784][T11461] EXT4-fs (loop3): 1 truncate cleaned up [ 839.058492][T11461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 839.425851][T11484] fuse: Bad value for 'fd' [ 840.031095][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 840.204105][ T6542] usb 2-1: Using ep0 maxpacket: 32 [ 840.258375][ T6542] usb 2-1: device descriptor read/all, error -71 [ 846.151334][T11552] fuse: Bad value for 'fd' [ 848.405725][T11560] loop2: detected capacity change from 0 to 512 [ 848.424365][T11560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 849.046502][T11560] EXT4-fs (loop2): 1 truncate cleaned up [ 849.144218][T11560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 854.855043][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 855.608905][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 856.735844][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'. [ 856.781558][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'. [ 856.825989][T11628] device bond0 entered promiscuous mode [ 856.882912][T11628] device bond_slave_0 entered promiscuous mode [ 856.894321][T11628] device bond_slave_1 entered promiscuous mode [ 856.926033][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 856.935110][T11628] device batadv_slave_1 entered promiscuous mode [ 856.964611][T11628] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 857.254632][T11628] Cannot create hsr debugfs directory [ 857.320991][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 857.375923][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'. [ 857.495607][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2002'. [ 857.970213][T11646] loop1: detected capacity change from 0 to 512 [ 858.350518][T11646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 859.282478][T11654] netlink: set zone limit has 8 unknown bytes [ 860.400197][T11646] EXT4-fs (loop1): 1 truncate cleaned up [ 860.406421][T11646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 861.145563][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 863.339790][T11679] loop1: detected capacity change from 0 to 512 [ 863.395875][T11679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 863.764774][T11679] EXT4-fs (loop1): 1 truncate cleaned up [ 863.853056][T11679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 864.721717][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 864.895943][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 864.924370][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 866.185757][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 866.207150][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 867.553622][T11709] loop2: detected capacity change from 0 to 512 [ 867.563927][T11709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 867.615699][T11709] EXT4-fs (loop2): 1 truncate cleaned up [ 867.621419][T11709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 869.286237][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 870.044131][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.050932][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.832402][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 873.104354][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 873.134219][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 873.364973][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 873.384388][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 875.424688][T11785] loop1: detected capacity change from 0 to 64 [ 875.584764][T11785] hfs: unable to locate alternate MDB [ 875.590202][T11785] hfs: continuing without an alternate MDB [ 877.612856][T11810] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 882.663787][T11854] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 883.611828][T11865] loop2: detected capacity change from 0 to 512 [ 883.649207][T11865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 883.682211][T11864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 884.153391][T11865] EXT4-fs (loop2): 1 truncate cleaned up [ 884.163750][T11865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 884.887710][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 885.035738][T11884] loop1: detected capacity change from 0 to 64 [ 885.094250][T11884] hfs: unable to locate alternate MDB [ 885.121827][T11884] hfs: continuing without an alternate MDB [ 885.189576][ T4264] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 885.444520][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 886.275013][ T27] audit: type=1326 audit(1734069268.570:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aecf85d19 code=0x7ffc0000 [ 886.349637][ T27] audit: type=1326 audit(1734069268.630:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4aecf85d19 code=0x7ffc0000 [ 886.424368][ T27] audit: type=1326 audit(1734069268.630:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aecf85d19 code=0x7ffc0000 [ 886.505347][ T27] audit: type=1326 audit(1734069268.630:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11891 comm="syz.0.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aecf85d19 code=0x7ffc0000 [ 889.216792][ T4264] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 889.225817][ T4264] Bluetooth: hci2: Injecting HCI hardware error event [ 889.235735][ T4264] Bluetooth: hci2: hardware error 0x00 [ 891.604988][ T4264] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 892.658144][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 894.448423][T11966] loop2: detected capacity change from 0 to 512 [ 895.112453][T11966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 895.503499][T11966] EXT4-fs (loop2): 1 truncate cleaned up [ 895.522581][T11966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 898.953041][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 904.847529][T12049] fuse: Bad value for 'fd' [ 905.191507][T12048] loop1: detected capacity change from 0 to 512 [ 905.243795][T12048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 905.367096][T12048] EXT4-fs (loop1): 1 truncate cleaned up [ 905.392127][T12048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 906.648164][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 910.830434][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 910.853606][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 913.993040][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'. [ 914.017659][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 914.036834][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'. [ 914.054226][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'. [ 914.120409][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'. [ 914.141709][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'. [ 916.824436][T12139] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 922.767446][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 925.755561][T12204] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 931.884868][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.884989][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.695213][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 933.281509][T12249] netlink: del zone limit has 8 unknown bytes [ 936.725378][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 937.894597][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'. [ 938.051051][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2186'. [ 938.070380][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'. [ 939.654545][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2186'. [ 939.696445][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'. [ 940.113255][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2191'. [ 940.140020][T12309] device bridge_slave_1 left promiscuous mode [ 940.160423][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.187184][T12309] device bridge_slave_0 left promiscuous mode [ 940.200341][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.277436][ T4264] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 942.340635][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 945.227766][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2202'. [ 945.285072][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 945.327377][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2202'. [ 945.454490][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 946.293412][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2202'. [ 947.749805][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 952.500138][T12404] loop2: detected capacity change from 0 to 512 [ 952.568595][T12404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 953.413203][T12404] EXT4-fs (loop2): 1 truncate cleaned up [ 953.434689][T12404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 955.052186][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 955.467654][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 955.476472][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 955.483874][T12431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 955.492519][T12431] device bridge_slave_0 left promiscuous mode [ 955.499279][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.536616][T12431] device bridge_slave_1 left promiscuous mode [ 955.542954][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.560048][T12431] bond0: (slave bond_slave_0): Releasing backup interface [ 956.763591][T12431] bond0: (slave bond_slave_1): Releasing backup interface [ 956.907545][T12431] team0: Port device team_slave_0 removed [ 956.962261][T12431] team0: Port device team_slave_1 removed [ 956.968748][T12431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.989790][T12431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.111733][T12431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.119959][T12431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.305873][T12467] loop2: detected capacity change from 0 to 512 [ 960.404152][T12467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 960.521207][T12467] EXT4-fs (loop2): 1 truncate cleaned up [ 960.532975][T12467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 961.513078][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 967.142886][T12523] loop3: detected capacity change from 0 to 512 [ 968.111578][T12523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 968.195686][T12523] EXT4-fs (loop3): 1 truncate cleaned up [ 968.201377][T12523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 968.937747][T12536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2252'. [ 969.168691][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 973.863390][T12584] loop2: detected capacity change from 0 to 512 [ 973.943452][T12584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 974.211590][T12584] EXT4-fs (loop2): 1 truncate cleaned up [ 974.219156][T12584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 975.180574][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 975.200929][T12599] (syz.0.2269,12599,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 975.231173][T12599] (syz.0.2269,12599,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 980.231865][T12638] loop2: detected capacity change from 0 to 512 [ 980.294666][T12638] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 980.318407][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 980.392058][T12638] EXT4-fs (loop2): 1 truncate cleaned up [ 980.398044][T12638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 981.494773][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 982.180763][T12656] sp0: Synchronizing with TNC [ 984.019057][T11373] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 985.104029][T11373] usb 4-1: Using ep0 maxpacket: 16 [ 985.117034][T11373] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 985.392499][T11373] usb 4-1: string descriptor 0 read error: -71 [ 985.402696][T11373] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 985.463412][T11373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.530531][T11373] usb 4-1: config 0 descriptor?? [ 985.682126][T11373] usb 4-1: can't set config #0, error -71 [ 985.699933][T11373] usb 4-1: USB disconnect, device number 2 [ 985.726018][T12686] tc_dump_action: action bad kind [ 988.774144][T12698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 988.782866][T12698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 988.790370][T12698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 988.809595][T12698] bond0: (slave bond_slave_0): Releasing backup interface [ 988.830953][T12698] device bond_slave_0 left promiscuous mode [ 988.870066][T12698] bond0: (slave bond_slave_1): Releasing backup interface [ 988.881721][T12698] device bond_slave_1 left promiscuous mode [ 988.923419][T12698] team0: Port device team_slave_0 removed [ 988.964205][T12698] team0: Port device team_slave_1 removed [ 988.970545][T12698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.978623][T12698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.126306][T12719] process 'syz.2.2301' launched './file0' with NULL argv: empty string added [ 989.303519][T12722] Illegal XDP return value 4294967294 on prog (id 150) dev N/A, expect packet loss! [ 992.636189][T12698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.643645][T12698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.914926][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.921289][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.192607][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 1005.806842][T12843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2339'. [ 1006.152592][ T4264] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 1010.174224][ T4264] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1010.185117][ T4264] Bluetooth: hci4: Injecting HCI hardware error event [ 1010.216550][ T4264] Bluetooth: hci4: hardware error 0x00 [ 1011.152753][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1011.161748][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1011.169250][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1011.178138][T12905] device bridge_slave_0 left promiscuous mode [ 1011.184532][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.351074][T12905] device bridge_slave_1 left promiscuous mode [ 1011.357470][T12905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.368382][T12905] bond0: (slave bond_slave_0): Releasing backup interface [ 1011.378022][T12905] device bond_slave_0 left promiscuous mode [ 1011.420976][T12905] bond0: (slave bond_slave_1): Releasing backup interface [ 1011.430279][T12905] device bond_slave_1 left promiscuous mode [ 1011.473283][T12905] team0: Port device team_slave_0 removed [ 1011.522482][T12905] team0: Port device team_slave_1 removed [ 1011.529246][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.536901][T12905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.565455][T12905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.573050][T12905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.178626][ T4264] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1015.711881][T12899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1015.732493][T12899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1015.741203][T12899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1015.750828][T12899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1015.760527][T12899] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1015.768018][T12899] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.172291][T12942] chnl_net:caif_netlink_parms(): no params data found [ 1017.511860][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.835295][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.855726][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 1018.089680][T12942] device bridge_slave_0 entered promiscuous mode [ 1018.115505][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.122641][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.131398][T12942] device bridge_slave_1 entered promiscuous mode [ 1018.386074][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.424720][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.563294][T12942] team0: Port device team_slave_0 added [ 1018.618335][T12942] team0: Port device team_slave_1 added [ 1018.935858][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.971672][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.029420][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 1020.267925][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.321799][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.369292][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.417506][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.497708][T12942] device hsr_slave_0 entered promiscuous mode [ 1020.522928][T12942] device hsr_slave_1 entered promiscuous mode [ 1020.540882][T12942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.550246][ T6526] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1020.571259][T12942] Cannot create hsr debugfs directory [ 1020.744037][ T6526] usb 3-1: Using ep0 maxpacket: 16 [ 1020.751670][ T6526] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1020.776932][ T6526] usb 3-1: config 0 has no interface number 0 [ 1020.791185][ T6526] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.846902][ T6526] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1020.883338][ T6526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.928477][ T6526] usb 3-1: Product: syz [ 1020.964606][ T6526] usb 3-1: Manufacturer: syz [ 1020.988691][ T6526] usb 3-1: SerialNumber: syz [ 1021.248074][ T6526] usb 3-1: config 0 descriptor?? [ 1021.612604][ T4423] usb 3-1: Failed to submit usb control message: -71 [ 1021.620648][ T6526] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1021.645397][ T4423] usb 3-1: unable to send the bmi data to the device: -71 [ 1021.676081][ T6526] usb 3-1: USB disconnect, device number 4 [ 1021.687159][ T4423] usb 3-1: unable to get target info from device [ 1021.693999][ T4423] usb 3-1: could not get target info (-71) [ 1021.700773][ T4423] usb 3-1: could not probe fw (-71) [ 1021.822498][T12942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1021.872857][T12942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1021.879951][T13007] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1021.905440][T12942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1021.926548][T12942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1022.093973][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 1022.141053][T13007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.054203][T13007] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1023.063403][T13007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.117317][T12942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.282742][T12942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.289824][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.301223][T13007] usb 4-1: config 0 descriptor?? [ 1023.329601][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.635661][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1023.748661][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1024.058122][T13007] pwc: Askey VC010 type 2 USB webcam detected. [ 1024.086144][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.093336][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.105748][T13007] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1024.308968][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 1024.338948][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1024.866311][T13007] pwc: recv_control_msg error -32 req 02 val 2700 [ 1024.873672][T13007] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1024.880935][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1024.895056][T13007] pwc: recv_control_msg error -32 req 04 val 1000 [ 1024.912655][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1024.914040][T13007] pwc: recv_control_msg error -32 req 04 val 1300 [ 1024.931813][T13007] pwc: recv_control_msg error -32 req 04 val 1400 [ 1024.954133][T13007] pwc: recv_control_msg error -32 req 02 val 2000 [ 1024.959828][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.964899][T13007] pwc: recv_control_msg error -32 req 02 val 2100 [ 1024.967866][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.980665][T13007] pwc: recv_control_msg error -32 req 04 val 1500 [ 1024.999611][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1025.033672][T12942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1025.047567][T12942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1025.189732][T13007] pwc: recv_control_msg error -32 req 02 val 2500 [ 1025.234100][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1025.255229][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1025.400939][T13007] pwc: recv_control_msg error -71 req 02 val 2600 [ 1025.487877][T13007] pwc: recv_control_msg error -71 req 02 val 2900 [ 1025.602744][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1025.702021][T13007] pwc: recv_control_msg error -71 req 02 val 2800 [ 1026.053655][T13007] pwc: recv_control_msg error -71 req 04 val 1100 [ 1026.074266][T13007] pwc: recv_control_msg error -71 req 04 val 1200 [ 1026.082152][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.100434][T13007] pwc: Registered as video103. [ 1026.115006][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.127100][T13007] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 1026.140347][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.212240][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.280952][T13007] usb 4-1: USB disconnect, device number 3 [ 1026.294995][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.370599][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.454588][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.753633][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1029.609978][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1029.624209][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1029.667816][T12942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.562202][T13086] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1035.016910][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1035.105495][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1035.124451][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1035.143667][T13125] loop2: detected capacity change from 0 to 64 [ 1035.298670][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1035.315284][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1035.324111][T13125] hfs: unable to locate alternate MDB [ 1035.329618][T13125] hfs: continuing without an alternate MDB [ 1035.347485][T12942] device veth0_vlan entered promiscuous mode [ 1036.245878][T12942] device veth1_vlan entered promiscuous mode [ 1036.294036][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.302557][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.318729][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1036.624451][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1036.641992][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1036.693462][T12942] device veth0_macvtap entered promiscuous mode [ 1036.770081][T12942] device veth1_macvtap entered promiscuous mode [ 1036.871080][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.965811][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.015336][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.026179][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.043814][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1037.149479][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1037.181560][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1037.208253][T12942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.228423][T12942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.243290][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.252225][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1037.265948][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1037.287643][T12942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.298057][T12942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.307978][T12942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.320992][T12942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.554260][ T5065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.621308][ T5065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.672282][ T4484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.681511][ T4484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.699120][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1037.716366][ T7016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1038.937582][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 1044.776623][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 1048.270035][ T1126] block nbd5: Attempted send on invalid socket [ 1048.276898][ T1126] I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1048.286858][ T1126] gfs2: error 10 reading superblock [ 1048.612777][T13263] device batadv2 entered promiscuous mode [ 1050.281581][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1054.337647][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.344235][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.242474][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 1063.718446][ T4264] Bluetooth: Wrong link type (-71) [ 1064.871342][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1066.595026][T13394] netlink: 'syz.2.2494': attribute type 21 has an invalid length. [ 1066.607459][ T4264] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 1066.607563][ T4264] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 1066.651427][T13394] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2494'. [ 1068.581330][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 1071.259684][T13065] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1071.618148][T13065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.688008][T13065] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1071.709307][T13065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.034863][T13065] usb 4-1: config 0 descriptor?? [ 1073.115316][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 1073.115382][T13458] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1073.253775][T13065] usbhid 4-1:0.0: can't add hid device: -71 [ 1073.266886][T13065] usbhid: probe of 4-1:0.0 failed with error -71 [ 1073.315056][T13065] usb 4-1: USB disconnect, device number 4 [ 1073.414028][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1073.913950][T13065] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1074.114370][T13065] usb 4-1: Using ep0 maxpacket: 32 [ 1074.122708][T13065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.164520][T13065] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1074.173627][T13065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.199449][T13065] usb 4-1: config 0 descriptor?? [ 1074.211630][T13065] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1074.304358][T13065] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1075.145339][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.174670][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.205307][ T7469] usb 4-1: USB disconnect, device number 5 [ 1075.213776][ T7469] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1077.063343][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2528'. [ 1077.458490][T13518] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1077.997963][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2533'. [ 1080.655821][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2542'. [ 1081.791662][T13578] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1084.991563][T13638] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1089.389942][T13681] input: syz0 as /devices/virtual/input/input10 [ 1089.791440][ T6526] kernel read not supported for file /bus/input/devices (pid: 6526 comm: kworker/0:10) [ 1090.952944][ T4264] Bluetooth: Wrong link type (-71) [ 1093.253189][T13713] fuse: Bad value for 'user_id' [ 1093.892327][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2592'. [ 1093.932542][T13724] device bridge_slave_1 left promiscuous mode [ 1094.158059][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.175614][T13724] device bridge_slave_0 left promiscuous mode [ 1094.182292][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.803425][T13753] fuse: Bad value for 'user_id' [ 1097.694856][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'. [ 1098.451825][T13776] loop3: detected capacity change from 0 to 512 [ 1098.557926][T13776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1098.635367][T13776] EXT4-fs (loop3): 1 truncate cleaned up [ 1098.641356][T13776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1100.707392][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 1100.920158][T13796] fuse: Bad value for 'user_id' [ 1101.422390][T13807] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1101.594585][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'. [ 1102.136465][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'. [ 1104.196855][T13854] loop2: detected capacity change from 0 to 512 [ 1104.932852][T13854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1105.291943][T13854] EXT4-fs (loop2): 1 truncate cleaned up [ 1105.303967][T13854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1105.677281][T13909] Bluetooth: MGMT ver 1.22 [ 1106.188918][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 1107.693126][T13927] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1114.075562][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2640'. [ 1115.787305][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.793884][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.945557][T14107] loop2: detected capacity change from 0 to 512 [ 1117.964373][T14107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1118.908083][T14107] EXT4-fs (loop2): 1 truncate cleaned up [ 1118.914268][T14107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1120.108805][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 1120.454877][T14135] overlayfs: failed to clone upperpath [ 1122.997060][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1123.546656][T14173] fuse: Bad value for 'fd' [ 1126.122331][ T52] block nbd3: Attempted send on invalid socket [ 1126.130686][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1128.502255][T14261] fuse: Bad value for 'fd' [ 1128.515388][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 1128.747835][T14272] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1129.854006][ T4264] Bluetooth: hci0: command 0x0401 tx timeout [ 1129.860212][T12899] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1132.504920][T10139] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1132.515417][T10139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1132.529431][T10139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1132.554027][T10139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1132.561778][T10139] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1132.569387][T10139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1133.172059][T14353] fuse: Invalid rootmode [ 1134.675515][ T52] block nbd2: Attempted send on invalid socket [ 1134.681750][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1134.814084][T12899] Bluetooth: hci6: command 0x0409 tx timeout [ 1135.140856][T14334] chnl_net:caif_netlink_parms(): no params data found [ 1135.550222][T14334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.560592][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.569254][T14334] device bridge_slave_0 entered promiscuous mode [ 1135.578836][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.586288][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.602041][T14334] device bridge_slave_1 entered promiscuous mode [ 1135.798754][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.844872][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.835819][T14392] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 1136.903941][T10139] Bluetooth: hci6: command 0x041b tx timeout [ 1137.169273][T14334] team0: Port device team_slave_0 added [ 1138.030836][T14334] team0: Port device team_slave_1 added [ 1138.824654][T12899] Bluetooth: hci5: command 0x0406 tx timeout [ 1138.952068][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.985544][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.017014][T10139] Bluetooth: hci6: command 0x040f tx timeout [ 1139.253415][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.377937][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.403163][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.429716][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.662542][T13988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.747832][T14334] device hsr_slave_0 entered promiscuous mode [ 1139.769508][T14334] device hsr_slave_1 entered promiscuous mode [ 1139.783609][T14334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1139.800911][T14334] Cannot create hsr debugfs directory [ 1139.842440][T13988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.191597][T13988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.718737][T13988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.054493][T12899] Bluetooth: hci6: command 0x0419 tx timeout [ 1142.132425][T14467] loop5: detected capacity change from 0 to 512 [ 1142.184442][T14467] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1142.702079][T14467] EXT4-fs (loop5): 1 truncate cleaned up [ 1142.751742][T14467] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1143.204028][T12805] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1144.455197][T12942] EXT4-fs (loop5): unmounting filesystem. [ 1146.005270][T13988] device erspan0 left promiscuous mode [ 1146.677814][T13988] device batadv_slave_1 left promiscuous mode [ 1146.689289][T13988] device hsr_slave_0 left promiscuous mode [ 1146.697412][T13988] device hsr_slave_1 left promiscuous mode [ 1146.735210][T13988] device veth1_macvtap left promiscuous mode [ 1146.741680][T13988] device veth0_macvtap left promiscuous mode [ 1146.748038][T13988] device veth1_vlan left promiscuous mode [ 1146.754359][T13988] device veth0_vlan left promiscuous mode [ 1147.894735][T13988] bond0 (unregistering): Released all slaves [ 1148.459903][T13988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.539402][T13988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.635893][T13988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.713744][T13988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.875806][T13988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.969188][T13988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.039892][T13988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.111866][T13988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.352880][T13988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.448635][T13988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.546833][T13988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.634335][T13988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.876038][T13988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.961896][T13988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.066221][T13988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.151948][T13988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0