last executing test programs: 28.632265804s ago: executing program 4 (id=1874): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) connect$caif(r0, &(0x7f0000000c40)=@rfm={0x25, 0x0, "11092e1d0c6dc286baceeb89f182ecb6"}, 0x18) 11.965684195s ago: executing program 3 (id=1935): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000700), 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000740)={0x0, 0x0, 0x4, {0x4, @sdr}}) dup(0xffffffffffffffff) userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000008c0)=@sco={0x1f, @none}, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a40)=""/228}, {&(0x7f0000000b40)=""/211}, {&(0x7f0000000c40)=""/133}, {&(0x7f0000000d00)=""/224}, {&(0x7f00000029c0)=""/4096}, {&(0x7f0000000e00)=""/254}, {&(0x7f0000000f00)=""/159}, {&(0x7f0000000fc0)=""/164}, {&(0x7f0000000000)=""/38}], 0x0, &(0x7f00000039c0)=""/4096}, 0xdb}], 0x1015a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000880), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r5 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) 10.252128496s ago: executing program 3 (id=1939): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 9.507070257s ago: executing program 3 (id=1942): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x10, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f93796e8"}}) 9.343735271s ago: executing program 3 (id=1944): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000980), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003040)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x3, 0x0) openat(r1, &(0x7f0000001180)='./file0/file0\x00', 0x202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) pipe(&(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@creator={'creator', 0x3d, "efab8d2b"}}, {@barrier}, {@force}, {@umask={'umask', 0x3d, 0x8001}}, {@barrier}, {@force}, {@force}], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x63, 0x66, 0x36, 0x5a, 0x65, 0x35], 0x2d, [0x1, 0x32, 0x65, 0x66], 0x2d, [0x66, 0x65, 0x64, 0x61], 0x2d, [0x30, 0x61, 0x63, 0x32], 0x2d, [0x33, 0x37, 0x66, 0x0, 0x64, 0x33, 0x64, 0x31]}}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@subj_type}]}, 0x1, 0x5ca, &(0x7f00000006c0)="$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") mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={[{@dyn}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00'}, 0x90) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 6.808001799s ago: executing program 0 (id=1949): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000040)) 6.108443177s ago: executing program 2 (id=1951): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f00000002c0)) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000025c0)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002100)="bb", 0x1}], 0x1}], 0x1, 0x8044) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x6ff, 0xc0000) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7}) socket$rds(0x15, 0x5, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) 5.874585556s ago: executing program 3 (id=1952): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) r6 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00110a000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="1c00000008ca318dead10007e9947ddf9d19655d7c80961bb0675ce795be9a47c629d5420d1000eb677a6c44a7a8ac36fc050f07f1c3f97586cdac5716d19be54942318f8b2df0df09fbe629462187edf761d796715ac02e56ab08d59e5be944af4f900005dec9aa89488602dceff74aeb66f42cb277353cc0"], 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) io_setup(0x7, 0x0) 5.869229536s ago: executing program 0 (id=1953): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="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"}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4,\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 5.837978999s ago: executing program 4 (id=1876): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="11acbde55bda41fb1ddf074b11407ef5434c", 0x12}}, 0x0) recvmmsg(r0, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010162, 0x0) 5.522058355s ago: executing program 0 (id=1954): pipe(&(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000100)) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.521564835s ago: executing program 4 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.645826047s ago: executing program 1 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000008c0)}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {&(0x7f0000000b40), 0x6000}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640"], 0x18}}], 0x3, 0x0) 4.336235483s ago: executing program 4 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003"], 0x58}}, 0x0) 3.528354709s ago: executing program 1 (id=1959): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x0, 0x2}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000005240)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x7ffffb, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) dup2(r5, r3) pwritev2(r2, &(0x7f0000000340)=[{0x0}, {&(0x7f00000003c0)}, {0x0}], 0x3, 0xfffb, 0x40000, 0x0) openat(r1, &(0x7f0000000100)='./file1\x00', 0x103042, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, 0x0) 3.527577959s ago: executing program 0 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x48, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x48}}, 0x0) 3.460604745s ago: executing program 2 (id=1960): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000480)='./bus\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x64a682, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 3.328144726s ago: executing program 4 (id=1961): unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.304549457s ago: executing program 0 (id=1963): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000980), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003040)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000000), 0x0, 0x3, 0x0) openat(r1, &(0x7f0000001180)='./file0/file0\x00', 0x202, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) pipe(&(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@creator={'creator', 0x3d, "efab8d2b"}}, {@barrier}, {@force}, {@umask={'umask', 0x3d, 0x8001}}, {@barrier}, {@force}, {@force}], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x63, 0x66, 0x36, 0x5a, 0x65, 0x35], 0x2d, [0x1, 0x32, 0x65, 0x66], 0x2d, [0x66, 0x65, 0x64, 0x61], 0x2d, [0x30, 0x61, 0x63, 0x32], 0x2d, [0x33, 0x37, 0x66, 0x0, 0x64, 0x33, 0x64, 0x31]}}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x11}}, {@subj_type}]}, 0x1, 0x5ca, &(0x7f00000006c0)="$eJzs3cFvHFcdB/DvbGLHDlK6SZOmICSscgA1IlnvRiZISEApyEIVqsSlVyvZ1FY2aWRvkdsDCohz+y+Ugzlz4ISClANn/gWjHhHcfUs1s7PeTbJ1ncb1rtvPR5p9782befObn2dGM7OyNsA31uo7mXuUIqtX3tou27s7nd7uTufusJ7kTJJGspCkKGf/PcmnyYMMpnx72DFWPqP4ePXm+sOPLg9aC/VULV8ctN7h7MfSHMRalUc1XvuFxxvt4VKSC3UJU/d46D8Tu1/wvAQAZlmRnJo0v5mcrW/Wy+eAwV3x4B77RHsw7QAAAADgGLy0l71s59y04wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTpP79/6KeGsP6Uorh7//P1/NS10+0R9MOAAAAAAAAAACOwPf2spftnBu2HxfVd/6vVY2L1ee38n620s1mrmY7a+mnn80sJ2mODTS/vdbvby4fYs32xDXbx7O/AAAAAAAAAPA19aesjr7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAWVAkpwZFNV0c1ptpnE6ykGS+XO5B8nBYP8keTTsAAAAAOAYv7WUv2zk3bD8uqmf+V6rn/oW8n3vpZyP99NLNrepdwOCpv7G70+nt7nTultOz4/7i/88VRjViBu8eJm+5VS1xaX+N1fw6v8uVLOXtbGYjv89a+ulmKW9WtbUUadZvL5rDOCfH+/MnWm9/UayvVpEs5nY2qtiu5mbeSy+30qj2oVrm4C3+scxO8bPaIXN0qy7LPfpNXc6GZpWRuf2MtOrcl9k4f3AmnvM4eXpLy2nsv4O6+BXk/Gxdlrl+c6Zz3h47+l45OBNJq/2/++u9e3fWb29dmZ1d+pKezkRnLBOXv1GZmK+zMbiKPt/V8rVq3XPZyG/zXm6lmxtp5UZWcj2drOQnWRnL66VDnGuN5zvXvv/DujKX5Fd1ORvKvJ4fy+v4la5Z9Y3PGWXpwtFfkU5/p66UB+sbM3dFOv/UtXmYiZcPzsRfHpefW717dzbX1+4fcns/qMsyA7+cqUyUx8uF8o9VtZ48Osq+lyf2LVd9F/f7Gs/0Xdrv+6Izdb6+h3t2pHbVd3liX6fqe3Wsb9JdDgAz7+zrZ+cX/7v478VPFv+8uL741sIbZ26c+e585v51+h+n/tb4a+Onxev5JH8YPf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf3tYHH95Z6/W6myoqKir7lWlfmYCv2rX+3fvXtj748Ecbd9fe7b7bvXd9eaV9/Xpr5cc3rt3e6HVbg89phwkAHKHRTf+0IwEAAAAAAAAAAAAAAD7Pcfw78bT3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HpbfSdzj1JkuXW1VbZ3dzq9chrWR0suJCnKyj+TfJo8yGBKc2y44vO2U3y8enP94UeXR2MtDJcvDlrvcJ6IpfFUTC86XvuFxxvt4VKSC3UJU/dZAAAA//94/wNT") mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={[{@dyn}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00'}, 0x90) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.170543379s ago: executing program 2 (id=1964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2810000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@nobh}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0x88d}}, {@delalloc}, {@discard}, {@nojournal_checksum}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 2.485119565s ago: executing program 2 (id=1965): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2040cc, &(0x7f0000001480)={[{@fat=@fmask={'fmask', 0x3d, 0x9}}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@uid}, {@fat=@allow_utime}, {@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {}, {@fat=@errors_remount}, {@nodots}, {@nodots}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@nodots}]}, 0xfd, 0x1c9, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x1431c1, 0x0) 1.914510682s ago: executing program 2 (id=1966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000071000040"]) 1.20878851s ago: executing program 2 (id=1967): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r2 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) inotify_init() epoll_create(0x9) socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1.09396693s ago: executing program 4 (id=1968): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x6194, &(0x7f0000004a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 835.833481ms ago: executing program 1 (id=1969): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x0}) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) 772.597516ms ago: executing program 3 (id=1971): timer_create(0x0, &(0x7f0000533fa0), &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffff850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x17e0, 0x0, 0x0, 0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000005e80)='./file1\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2d, 0x7, 0x3, 0xf86d, 0x0, @mcast1, @empty, 0x700, 0x0, 0x4, 0x6}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 504.026378ms ago: executing program 1 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) 307.446104ms ago: executing program 1 (id=1973): syz_mount_image$fuse(0x0, &(0x7f0000004280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000ec0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='sched_process_fork\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xe}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x80000000, 0xed, 0x7, 0x78}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 259.463198ms ago: executing program 0 (id=1974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x4004662b, &(0x7f0000000280)={@id={0x2, 0x0, @auto="bfee8e7268b4fecd2fce2d54fbd909e4"}}) 0s ago: executing program 1 (id=1975): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r1, &(0x7f0000000000), 0x2000) kernel console output (not intermixed with test programs): 12) [ 457.110154][ T8993] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 457.138497][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.231112][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.319849][ T8996] netlink: 'syz.3.1549': attribute type 22 has an invalid length. [ 457.342849][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 457.499016][ T8924] team0: Port device team_slave_0 added [ 457.589269][ T8924] team0: Port device team_slave_1 added [ 457.607000][ T3648] Bluetooth: hci4: command tx timeout [ 457.609985][ T9002] loop1: detected capacity change from 0 to 256 [ 457.648359][ T9002] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 457.747751][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.770735][ T3656] Bluetooth: hci3: command tx timeout [ 457.796219][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.861376][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.874464][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.881605][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.939697][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.960841][ T9008] xt_connbytes: Forcing CT accounting to be enabled [ 457.985270][ T9008] Cannot find add_set index 0 as target [ 458.084896][ T9008] loop3: detected capacity change from 0 to 1764 [ 458.194187][ T9008] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 458.208119][ T8924] device hsr_slave_0 entered promiscuous mode [ 458.224038][ T8924] device hsr_slave_1 entered promiscuous mode [ 458.232365][ T8924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.254079][ T8924] Cannot create hsr debugfs directory [ 458.404740][ T9019] loop1: detected capacity change from 0 to 1024 [ 458.414428][ T9021] loop3: detected capacity change from 0 to 512 [ 458.427706][ T9019] EXT4-fs: Ignoring removed orlov option [ 458.470898][ T9019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 458.496147][ T9019] EXT4-fs (loop1): Test dummy encryption mode enabled [ 458.503821][ T4024] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 458.544513][ T9019] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 458.564173][ T9021] loop3: detected capacity change from 0 to 512 [ 458.583055][ T9019] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 458.617503][ T9019] EXT4-fs (loop1): invalid journal inode [ 458.624921][ T9021] [EXT4 FS bs=1024, gc=1, bpg=256, ipg=32, mo=e000e01c, mo2=0000] [ 458.641104][ T9019] EXT4-fs (loop1): can't get journal size [ 458.658780][ T9021] System zones: 1-12 [ 458.697300][ T9019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 458.714587][ T9021] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1559: invalid indirect mapped block 2 (level 0) [ 458.749154][ T8974] chnl_net:caif_netlink_parms(): no params data found [ 458.760674][ T9017] loop0: detected capacity change from 0 to 32768 [ 458.776054][ T9021] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1559: attempt to clear invalid blocks 2 len 1 [ 458.796963][ T9017] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1558 (9017) [ 458.840633][ T9017] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 458.867413][ T9021] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1559: bg 0: block 255: padding at end of block bitmap is not set [ 458.897015][ T9017] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 458.905885][ T9017] BTRFS info (device loop0): setting nodatacow, compression disabled [ 458.927085][ T9017] BTRFS error (device loop0): unrecognized metadata_ratio value 0x0000006000000000 [ 458.936545][ T9021] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 458.980099][ T8695] EXT4-fs (loop1): unmounting filesystem. [ 458.983078][ T9017] BTRFS error (device loop0): open_ctree failed [ 458.997078][ T9021] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1559: invalid indirect mapped block 1819239214 (level 0) [ 459.047082][ T9021] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1559: invalid indirect mapped block 1819239214 (level 1) [ 459.107626][ T9021] EXT4-fs (loop3): 1 truncate cleaned up [ 459.113350][ T9021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 459.188798][ T9021] sock: sock_set_timeout: `syz.3.1559' (pid 9021) tries to set negative timeout [ 459.260295][ T9021] virtio-fs: tag <(null)> not found [ 459.755390][ T3648] Bluetooth: hci4: command tx timeout [ 459.985787][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.003126][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 460.062285][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.119501][ T8974] device bridge_slave_0 entered promiscuous mode [ 460.138401][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.146289][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.168262][ T8974] device bridge_slave_1 entered promiscuous mode [ 460.186181][ T9030] loop1: detected capacity change from 0 to 8192 [ 460.225425][ T9030] FAT-fs (loop1): Unrecognized mount option "GPL" or missing value [ 460.246412][ T9039] loop3: detected capacity change from 0 to 256 [ 460.379926][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.396283][ T9039] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 460.444282][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.657560][ T8974] team0: Port device team_slave_0 added [ 460.738130][ T8974] team0: Port device team_slave_1 added [ 460.780623][ T8924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.837357][ T9044] loop3: detected capacity change from 0 to 256 [ 460.894896][ T9043] netlink: 724 bytes leftover after parsing attributes in process `syz.1.1564'. [ 460.905610][ T9044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 461.024737][ T8924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.129584][ T9037] loop0: detected capacity change from 0 to 32768 [ 461.150758][ T9037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1561 (9037) [ 461.197473][ T9037] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.245507][ T9037] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 461.268344][ T9037] BTRFS info (device loop0): using free space tree [ 461.485345][ T9037] BTRFS info (device loop0): enabling ssd optimizations [ 461.623015][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.656958][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.705537][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.727978][ T7246] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 461.750160][ T8924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.847326][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.847688][ T3656] Bluetooth: hci4: command tx timeout [ 461.854301][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.854331][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.855275][ T8924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.916321][ T9045] loop1: detected capacity change from 0 to 40427 [ 461.964562][ T9045] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 462.020185][ T9045] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 462.066227][ T9045] F2FS-fs (loop1): invalid crc value [ 462.134761][ T9045] F2FS-fs (loop1): Found nat_bits in checkpoint [ 462.319984][ T9045] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 462.330285][ T9045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 462.738018][ T8695] syz-executor: attempt to access beyond end of device [ 462.738018][ T8695] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 462.780569][ T8974] device hsr_slave_0 entered promiscuous mode [ 462.818164][ T8974] device hsr_slave_1 entered promiscuous mode [ 462.845296][ T8974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.864525][ T8974] Cannot create hsr debugfs directory [ 463.235321][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.304615][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.313437][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.348773][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.513976][ T8974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.616277][ T9075] loop0: detected capacity change from 0 to 32768 [ 463.696482][ T8974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.722397][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.731801][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.741778][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.748937][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.757267][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.953334][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.063254][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.070504][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.336788][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.539061][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.567203][ T9075] XFS (loop0): Mounting V5 Filesystem [ 464.601652][ T8974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.721420][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.731372][ T9075] XFS (loop0): Ending clean mount [ 464.744668][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.770170][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.817126][ T8924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.849083][ T8924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.869231][ T7246] XFS (loop0): Unmounting Filesystem [ 464.940186][ T9095] loop3: detected capacity change from 0 to 128 [ 464.964588][ T8974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.976203][ T9095] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 465.013969][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.042197][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 465.063282][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.093968][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.102974][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.118174][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.134112][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.201104][ T26] audit: type=1326 audit(1723061040.340:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9094 comm="syz.3.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62d93779f9 code=0x0 [ 465.287279][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 465.380368][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.056732][ T9103] loop3: detected capacity change from 0 to 1024 [ 466.155457][ T9103] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 466.231254][ T8974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.265798][ T8974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.342519][ T8974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.359385][ T8974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.484449][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.535506][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.543322][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.636583][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.114247][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.124064][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.132735][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.156494][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.895271][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.999200][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.006364][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.300773][ T9135] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 469.427204][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.435486][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.458552][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.467871][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.475011][ T4739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.484336][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.623709][ T9149] affs: No valid root block on device nbd0 [ 469.638976][ T5715] device hsr_slave_0 left promiscuous mode [ 469.646006][ T5715] device hsr_slave_1 left promiscuous mode [ 469.668420][ T5715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.675919][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.701598][ T5715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.718477][ T5715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.726539][ T5715] device bridge_slave_1 left promiscuous mode [ 469.735706][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.756000][ T5715] device bridge_slave_0 left promiscuous mode [ 469.763594][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.808328][ T5715] device veth1_macvtap left promiscuous mode [ 469.814422][ T5715] device veth0_macvtap left promiscuous mode [ 469.820830][ T5715] device veth1_vlan left promiscuous mode [ 469.826700][ T5715] device veth0_vlan left promiscuous mode [ 469.894628][ T9155] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 470.401895][ T9157] loop0: detected capacity change from 0 to 32768 [ 470.423008][ T9157] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 470.462843][ T9157] XFS (loop0): Quotacheck needed: Please wait. [ 470.505090][ T6297] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 470.526728][ T6297] XFS (loop0): Unmount and run xfs_repair [ 470.532841][ T6297] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 470.540303][ T6297] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 470.549255][ T6297] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 470.558274][ T6297] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 470.567526][ T6297] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 470.576424][ T6297] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 470.585443][ T6297] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 470.594383][ T6297] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 470.604235][ T6297] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 470.613768][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 470.650016][ T11] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 470.665305][ T11] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 470.686942][ T9157] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 470.752862][ T9157] UBIFS error (pid: 9157): cannot open "./file0", error -22 [ 470.825950][ T7246] XFS (loop0): Unmounting Filesystem [ 471.033670][ T5715] team0 (unregistering): Port device team_slave_1 removed [ 471.191483][ T5715] team0 (unregistering): Port device team_slave_0 removed [ 471.285543][ T5715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.327158][ T9171] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1594'. [ 471.336324][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 471.345484][ T9171] netlink: 'syz.0.1594': attribute type 2 has an invalid length. [ 471.409773][ T5715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.550887][ T9175] loop0: detected capacity change from 0 to 736 [ 471.686888][ T9175] Symlink component flag not implemented [ 471.692641][ T9175] Symlink component flag not implemented (121) [ 471.850737][ T9177] loop0: detected capacity change from 0 to 1024 [ 471.868627][ T9177] EXT4-fs: Ignoring removed orlov option [ 471.874351][ T9177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.916056][ T9177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 472.250851][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 472.444987][ T5715] bond0 (unregistering): Released all slaves [ 472.584991][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.594578][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.612725][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.665650][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.675100][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.685186][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.723746][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.774928][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.822890][ T8924] device veth0_vlan entered promiscuous mode [ 472.834611][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.844196][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.860407][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.870640][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.896190][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.932214][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.963578][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.992693][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.001964][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.027822][ T8924] device veth1_vlan entered promiscuous mode [ 473.143047][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 473.160679][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.187867][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.205075][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.240498][ T8924] device veth0_macvtap entered promiscuous mode [ 473.292089][ T8924] device veth1_macvtap entered promiscuous mode [ 473.389021][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.427943][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.454736][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.487280][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.503106][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.536951][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.556809][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.576795][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.590538][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.601127][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.610649][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.630439][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.643848][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.664081][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.692828][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.724814][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.743381][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.757110][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.768274][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.779304][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.800894][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.835870][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.927353][ T9211] loop0: detected capacity change from 0 to 256 [ 473.968433][ T9211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 474.027048][ T26] audit: type=1800 audit(1723061049.170:347): pid=9211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1609" name="file2" dev="loop0" ino=1048727 res=0 errno=0 [ 474.096186][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.105402][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.128641][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.141199][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.411108][ T8924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.614746][ T8924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.846732][ T8924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.855563][ T8924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.880979][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.893927][ T9213] loop1: detected capacity change from 0 to 4096 [ 475.057123][ T9213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 475.086999][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.096652][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.196185][ T26] audit: type=1804 audit(1723061050.340:348): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1607" name="/newroot/30/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 475.241955][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.257001][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.293032][ T8974] device veth0_vlan entered promiscuous mode [ 475.301550][ T5709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.324338][ T26] audit: type=1804 audit(1723061050.370:349): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1607" name="/newroot/30/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 475.351152][ T5709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.364282][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.372932][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.401644][ T5561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 475.416571][ T26] audit: type=1804 audit(1723061050.550:350): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1607" name="/newroot/30/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 475.462247][ T8974] device veth1_vlan entered promiscuous mode [ 475.539394][ T5718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.551208][ T5718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.576872][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 475.585229][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 475.610355][ T4745] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 475.618102][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 475.618886][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.657817][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.669703][ T8974] device veth0_macvtap entered promiscuous mode [ 475.692817][ T8974] device veth1_macvtap entered promiscuous mode [ 475.724973][ T8695] EXT4-fs (loop1): unmounting filesystem. [ 475.765818][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.817054][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.835415][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.872521][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.904996][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.936443][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.967124][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.001211][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.033055][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.054961][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.088938][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.108570][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.120461][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.139404][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.157348][ T4745] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 476.165065][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.173634][ T4745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.202459][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.212847][ T4745] usb 1-1: Product: syz [ 476.226880][ T4745] usb 1-1: Manufacturer: syz [ 476.236143][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.251156][ T4745] usb 1-1: SerialNumber: syz [ 476.256924][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.278588][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.289835][ T4745] usb 1-1: config 0 descriptor?? [ 476.305257][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.370208][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.413501][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.431292][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.479568][ T8974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.516981][ T8974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.535680][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.545164][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.562300][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.573766][ T6297] usb 1-1: USB disconnect, device number 12 [ 476.617777][ T8974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.626618][ T8974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.643287][ T8974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.652515][ T8974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.861549][ T5713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.876938][ T5713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.896403][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 476.926613][ T5713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.936034][ T5713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.956141][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.148595][ T9243] loop3: detected capacity change from 0 to 512 [ 477.206089][ T9243] EXT4-fs (loop3): filesystem is read-only [ 477.574282][ T9255] loop0: detected capacity change from 0 to 64 [ 477.595757][ T9255] hfs: invalid extent max_key_len 8714 [ 477.597496][ T3734] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 478.120539][ T9255] hfs: unable to open extent tree [ 478.152577][ T9255] hfs: can't find a HFS filesystem on dev loop0 [ 478.377204][ T3734] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 478.507946][ T3734] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.557625][ T3734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.639812][ T3734] usb 4-1: SerialNumber: syz [ 478.655953][ T4024] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 478.718516][ T3734] usb 4-1: bad CDC descriptors [ 478.729014][ T9266] netlink: 'syz.2.1619': attribute type 30 has an invalid length. [ 478.944770][ T9243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1626'. [ 479.150967][ T3734] usb 4-1: USB disconnect, device number 18 [ 479.955334][ T6286] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 480.437250][ T6286] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 480.455562][ T9295] loop1: detected capacity change from 0 to 512 [ 480.481458][ T6286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.258140][ T9280] loop4: detected capacity change from 0 to 32768 [ 481.266037][ T9280] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1628 (9280) [ 481.290323][ T6286] usb 1-1: config 0 descriptor?? [ 481.354725][ T9295] EXT4-fs (loop1): 1 orphan inode deleted [ 481.371250][ T9295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 481.417435][ T9295] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 481.524567][ T9280] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 481.589980][ T9280] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 481.635136][ T9280] BTRFS info (device loop4): using free space tree [ 481.642186][ T6286] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 481.666904][ T6286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 481.983696][ T9321] ext4: Unknown parameter 'gid' [ 482.232420][ T6286] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 482.301694][ T6286] [drm] Initialized udl on minor 2 [ 482.472291][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 482.541100][ T9329] loop2: detected capacity change from 0 to 512 [ 482.593433][ T9329] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 482.611394][ T9329] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 482.627074][ T6286] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 482.640778][ T6286] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 482.648573][ T9329] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1640: Corrupt directory, running e2fsck is recommended [ 482.685042][ T6286] usb 1-1: USB disconnect, device number 13 [ 482.697228][ T9329] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 482.730935][ T9329] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1640: corrupted in-inode xattr [ 482.767417][ T9329] EXT4-fs (loop2): Remounting filesystem read-only [ 482.774309][ T9329] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1640: couldn't read orphan inode 15 (err -117) [ 482.791283][ T9329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 482.812728][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 482.868249][ T9280] BTRFS error (device loop4): open_ctree failed [ 482.880809][ T8695] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 482.909019][ T8695] EXT4-fs (loop1): Remounting filesystem read-only [ 482.909795][ T8974] EXT4-fs (loop2): unmounting filesystem. [ 482.915938][ T8695] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16 [ 483.342011][ T8695] EXT4-fs (loop1): unmounting filesystem. [ 483.545725][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1649'. [ 484.335926][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.562016][ T9360] loop2: detected capacity change from 0 to 128 [ 484.821826][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.956100][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 484.965972][ T6297] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 485.486900][ T6297] usb 4-1: Using ep0 maxpacket: 16 [ 485.617113][ T6297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.634588][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.647098][ T3653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.660065][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.671839][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.697111][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.706969][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 485.717154][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.727948][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.738140][ T6297] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 485.745600][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.749435][ T6297] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.857770][ T6297] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.891906][ T6297] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.911903][ T6297] usb 4-1: Manufacturer: syz [ 485.932337][ T6297] usb 4-1: config 0 descriptor?? [ 485.974716][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.379326][ T9393] loop2: detected capacity change from 0 to 64 [ 486.405323][ T9364] loop4: detected capacity change from 0 to 40427 [ 486.450752][ T9364] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 486.497177][ T9364] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 486.574804][ T9364] F2FS-fs (loop4): invalid crc value [ 486.632798][ T9364] F2FS-fs (loop4): Found nat_bits in checkpoint [ 486.687111][ T6297] rc_core: IR keymap rc-hauppauge not found [ 486.687131][ T6297] Registered IR keymap rc-empty [ 486.687248][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.698442][ T9371] chnl_net:caif_netlink_parms(): no params data found [ 486.717019][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.741020][ T9401] syz.2.1662: attempt to access beyond end of device [ 486.741020][ T9401] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 486.741234][ T9401] syz.2.1662: attempt to access beyond end of device [ 486.741234][ T9401] loop2: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 486.750644][ T6297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 486.751823][ T6297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 486.758663][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.797892][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.827180][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.852511][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.852562][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.853483][ T9371] device bridge_slave_0 entered promiscuous mode [ 486.857118][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.886993][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.887872][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.887941][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.889127][ T9371] device bridge_slave_1 entered promiscuous mode [ 486.915741][ T9364] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 487.055711][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 487.064188][ T9364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 487.069917][ T9401] syz.2.1662: attempt to access beyond end of device [ 487.069917][ T9401] loop2: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 487.086933][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 487.139307][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 487.167253][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 487.197529][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 487.232332][ T6297] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 487.246195][ T6297] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 487.358850][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.498701][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.800133][ T9371] team0: Port device team_slave_0 added [ 487.848859][ T3656] Bluetooth: hci1: command tx timeout [ 487.880650][ T9389] loop0: detected capacity change from 0 to 32768 [ 487.958099][ T9371] team0: Port device team_slave_1 added [ 488.022224][ T9389] XFS (loop0): Mounting V5 Filesystem [ 488.265667][ T6297] usb 4-1: USB disconnect, device number 19 [ 488.344927][ T9389] XFS (loop0): Ending clean mount [ 488.369846][ T9389] XFS (loop0): Quotacheck needed: Please wait. [ 488.532735][ T9389] XFS (loop0): Quotacheck: Done. [ 488.603655][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1666'. [ 488.616347][ T26] audit: type=1804 audit(1723061063.750:351): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1661" name="/newroot/163/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 488.712398][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.728289][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.810980][ T26] audit: type=1804 audit(1723061063.960:352): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1661" name="/newroot/163/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 488.826895][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.956032][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.976168][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.032354][ T7246] XFS (loop0): Unmounting Filesystem [ 489.045351][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.382204][ T11] device hsr_slave_0 left promiscuous mode [ 489.395397][ T11] device hsr_slave_1 left promiscuous mode [ 489.439994][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.457478][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.475784][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.483452][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.499002][ T11] device bridge_slave_1 left promiscuous mode [ 489.525931][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.589186][ T11] device bridge_slave_0 left promiscuous mode [ 489.595532][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.760440][ T9435] loop0: detected capacity change from 0 to 512 [ 489.829415][ T9435] EXT4-fs (loop0): Test dummy encryption mode enabled [ 489.863651][ T9435] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1667: casefold flag without casefold feature [ 490.009224][ T3653] Bluetooth: hci1: command tx timeout [ 490.058353][ T9435] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 490.171638][ T11] device veth1_macvtap left promiscuous mode [ 490.238360][ T11] device veth0_macvtap left promiscuous mode [ 490.273632][ T11] device veth1_vlan left promiscuous mode [ 490.334028][ T11] device veth0_vlan left promiscuous mode [ 490.566483][ T9435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 490.585774][ T9440] devpts: called with bogus options [ 490.626707][ T9446] loop3: detected capacity change from 0 to 8 [ 490.694776][ T9446] SQUASHFS error: xz decompression failed, data probably corrupt [ 490.726950][ T9446] SQUASHFS error: Failed to read block 0xa8: -5 [ 490.790647][ T9446] SQUASHFS error: xz decompression failed, data probably corrupt [ 490.817127][ T9446] SQUASHFS error: Failed to read block 0xa8: -5 [ 490.823657][ T26] audit: type=1800 audit(1723061065.978:353): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1672" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 490.983728][ T9435] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 491.249048][ T3734] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 491.719114][ T9459] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 491.816915][ T3734] usb 5-1: Using ep0 maxpacket: 16 [ 491.964015][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 492.077179][ T3653] Bluetooth: hci1: command tx timeout [ 492.176954][ T3734] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 492.186062][ T3734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.194326][ T3734] usb 5-1: Product: syz [ 492.198646][ T3734] usb 5-1: Manufacturer: syz [ 492.211135][ T3734] usb 5-1: SerialNumber: syz [ 492.219660][ T3734] usb 5-1: config 0 descriptor?? [ 492.383008][ T11] team0 (unregistering): Port device team_slave_1 removed [ 492.440591][ T11] team0 (unregistering): Port device team_slave_0 removed [ 492.482083][ T9452] loop4: detected capacity change from 0 to 512 [ 492.518480][ T9452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 492.520884][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.604741][ T9452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1683: bg 0: block 248: padding at end of block bitmap is not set [ 492.620640][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.647398][ T9452] Quota error (device loop4): write_blk: dquota write failed [ 492.654951][ T9452] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 492.679807][ T9452] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1683: Failed to acquire dquot type 1 [ 492.724576][ T9452] EXT4-fs (loop4): 1 truncate cleaned up [ 492.736431][ T9452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 492.762548][ T9452] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 492.825588][ T9452] EXT4-fs error (device loop4): __ext4_remount:6425: comm syz.4.1683: Abort forced by user [ 492.843262][ T9452] EXT4-fs (loop4): Remounting filesystem read-only [ 493.117347][ T3734] usb 5-1: MIDIStreaming interface descriptor not found [ 493.258602][ T3734] usb 5-1: USB disconnect, device number 10 [ 493.580938][ T11] bond0 (unregistering): Released all slaves [ 493.659991][ T8924] EXT4-fs (loop4): unmounting filesystem. [ 494.157106][ T3653] Bluetooth: hci1: command tx timeout [ 494.243250][ T9371] device hsr_slave_0 entered promiscuous mode [ 494.768048][ T9474] loop0: detected capacity change from 0 to 2048 [ 494.793422][ T9371] device hsr_slave_1 entered promiscuous mode [ 494.843678][ T9371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.865019][ T9371] Cannot create hsr debugfs directory [ 494.889514][ T9477] loop4: detected capacity change from 0 to 1024 [ 494.967490][ T9474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 495.014271][ T9477] hfsplus: unable to parse mount options [ 495.053898][ T9473] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 495.096338][ T9474] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 495.148643][ T9488] loop2: detected capacity change from 0 to 512 [ 495.155115][ T9474] EXT4-fs (loop0): This should not happen!! Data will be lost [ 495.155115][ T9474] [ 495.190718][ T9474] EXT4-fs (loop0): Total free blocks count 0 [ 495.205033][ T9474] EXT4-fs (loop0): Free/Dirty block details [ 495.219588][ T9488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 495.236980][ T9474] EXT4-fs (loop0): free_blocks=66060288 [ 495.243245][ T9488] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 495.243283][ T9474] EXT4-fs (loop0): dirty_blocks=16 [ 495.263707][ T9474] EXT4-fs (loop0): Block reservation details [ 495.269057][ T9486] loop3: detected capacity change from 0 to 4096 [ 495.270602][ T9474] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 495.302868][ T9486] NILFS (loop3): invalid segment: Checksum error in segment payload [ 495.311180][ T9486] NILFS (loop3): trying rollback from an earlier position [ 495.343768][ T9486] NILFS (loop3): recovery complete [ 495.355236][ T9491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.436545][ T3712] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 495.490715][ T9476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 495.502483][ T9486] overlayfs: upper fs does not support tmpfile. [ 495.563677][ T9476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.635587][ T9486] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 495.732641][ T9476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.077065][ T9486] overlayfs: failed to set xattr on upper [ 496.810198][ T9496] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 497.056836][ T9486] overlayfs: ...falling back to index=off,metacopy=off. [ 497.468061][ T8974] EXT4-fs (loop2): unmounting filesystem. [ 498.101277][ T9505] loop2: detected capacity change from 0 to 8192 [ 498.149313][ T9505] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 498.260081][ T9505] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 498.273720][ T9505] REISERFS (device loop2): using journaled data mode [ 498.280622][ T9505] reiserfs: using flush barriers [ 498.311093][ T9505] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 498.331353][ T9505] REISERFS (device loop2): checking transaction log (loop2) [ 498.346215][ T9505] REISERFS (device loop2): Using r5 hash to sort names [ 498.360742][ T9505] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 498.388472][ T9505] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 498.455844][ T9371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.502497][ T9371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.545168][ T9371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.596570][ T9371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.705302][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.859041][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.880687][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.950624][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.040067][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.060476][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.116573][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.123804][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.174421][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.196679][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.213197][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.220382][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.274876][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.284014][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.302306][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.362432][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.380911][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.395533][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.406376][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.439388][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.455129][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.456868][ T3686] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 500.469119][ T9371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.493348][ T9540] loop2: detected capacity change from 0 to 512 [ 500.511912][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.526495][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.542629][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.571488][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.604308][ T9540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 500.629179][ T9540] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 500.708089][ T9530] loop0: detected capacity change from 0 to 32768 [ 500.870307][ T8974] EXT4-fs (loop2): unmounting filesystem. [ 500.880282][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.886718][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.059198][ T3686] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 501.086961][ T3686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.114094][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.126868][ T3686] usb 5-1: Product: syz [ 501.131088][ T3686] usb 5-1: Manufacturer: syz [ 501.136538][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.166260][ T3686] usb 5-1: SerialNumber: syz [ 501.167225][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.226265][ T3686] usb 5-1: config 0 descriptor?? [ 501.233994][ T26] audit: type=1326 audit(1723061076.388:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.3.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62d93779f9 code=0x0 [ 501.314143][ T3686] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 501.326179][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.340792][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.364533][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.378858][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.380588][ T9556] AppArmor: change_hat: Invalid input '0' [ 501.388005][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.416505][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.447982][ T9371] device veth0_vlan entered promiscuous mode [ 501.484767][ T9371] device veth1_vlan entered promiscuous mode [ 501.557132][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.565457][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.594306][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.621227][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.650523][ T9371] device veth0_macvtap entered promiscuous mode [ 501.693732][ T9371] device veth1_macvtap entered promiscuous mode [ 501.737152][ T3686] gspca_sunplus: reg_r err -71 [ 501.742317][ T3686] sunplus: probe of 5-1:0.0 failed with error -71 [ 501.771285][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.775251][ T3686] usb 5-1: USB disconnect, device number 11 [ 501.814763][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.857627][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.887010][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.932866][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.980615][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.035453][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.046855][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.063204][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.102598][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.430893][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.726393][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.795409][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.836838][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.879816][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.904927][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.915620][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.931046][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.952122][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.973717][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.988408][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.027017][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.063038][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.077779][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.086017][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.135331][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.153889][ T9558] loop0: detected capacity change from 0 to 32768 [ 503.162159][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.176615][ T4746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.292259][ T9371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.318866][ T9371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.327896][ T9371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.336653][ T9371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.774920][ T5713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.796444][ T9587] loop2: detected capacity change from 0 to 64 [ 503.823159][ T5713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.968930][ T9587] MINIX-fs: mounting file system with errors, running fsck is recommended [ 503.978005][ T5713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.987440][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.027420][ T5713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.073399][ T9592] loop4: detected capacity change from 0 to 256 [ 504.119372][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 504.139403][ T9592] exfat: Deprecated parameter 'utf8' [ 504.192285][ T9592] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 504.812105][ T9608] loop4: detected capacity change from 0 to 1024 [ 505.076406][ T9585] loop3: detected capacity change from 0 to 32768 [ 505.512504][ T9585] XFS (loop3): Mounting V5 Filesystem [ 505.561624][ C1] eth0: bad gso: type: 1, size: 1408 [ 505.576219][ T5707] hfsplus: b-tree write err: -5, ino 4 [ 505.689172][ T9585] XFS (loop3): Ending clean mount [ 505.735446][ T9585] XFS (loop3): Quotacheck needed: Please wait. [ 505.877398][ T9629] tmpfs: Bad value for 'mpol' [ 505.885854][ T9585] XFS (loop3): Quotacheck: Done. [ 505.886889][ T26] audit: type=1326 audit(1723061081.038:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 506.020201][ T26] audit: type=1326 audit(1723061081.038:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 506.074269][ T7982] XFS (loop3): Unmounting Filesystem [ 506.116406][ T26] audit: type=1326 audit(1723061081.038:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 506.198606][ T9636] loop4: detected capacity change from 0 to 512 [ 506.230465][ T26] audit: type=1326 audit(1723061081.038:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 506.326879][ T26] audit: type=1326 audit(1723061081.038:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 506.345734][ T9636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 506.407195][ T9636] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 507.158169][ T9648] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 507.624452][ T9658] loop2: detected capacity change from 0 to 2048 [ 507.700952][ T9658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.729536][ T8924] EXT4-fs (loop4): unmounting filesystem. [ 507.746974][ T3687] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 507.822731][ T26] audit: type=1800 audit(1723061082.978:360): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 508.661140][ T3687] usb 1-1: Using ep0 maxpacket: 32 [ 508.882684][ T3687] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 508.897265][ T3687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.907826][ T3687] usb 1-1: config 0 has no interface number 0 [ 508.913966][ T3687] usb 1-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.927277][ T3687] usb 1-1: Dual-Role OTG device on HNP port [ 508.957133][ T3687] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4c.b4 [ 508.966283][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.001827][ T3687] usb 1-1: config 0 descriptor?? [ 509.317165][ C1] eth0: bad gso: type: 1, size: 1408 [ 509.327095][ T3687] usb 1-1: string descriptor 0 read error: -71 [ 509.385236][ T3687] usb_ehset_test: probe of 1-1:0.224 failed with error -32 [ 509.440192][ T3687] usb 1-1: USB disconnect, device number 14 [ 509.523596][ T9683] loop4: detected capacity change from 0 to 1024 [ 510.299358][ T9674] loop1: detected capacity change from 0 to 32768 [ 510.345291][ T9674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1740 (9674) [ 510.375899][ T9685] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 510.402055][ T9674] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 510.422782][ T9674] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 510.479104][ T9674] BTRFS info (device loop1): using free space tree [ 510.755466][ T9702] loop3: detected capacity change from 0 to 512 [ 510.830906][ T9702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 510.866889][ T9674] BTRFS info (device loop1): enabling ssd optimizations [ 510.934272][ T9702] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038 (0x7fffffff) [ 511.297149][ T9712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 512.068298][ T9371] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 512.116530][ T9700] loop0: detected capacity change from 0 to 32768 [ 512.182720][ T9700] XFS: attr2 mount option is deprecated. [ 512.224141][ T9700] XFS: ikeep mount option is deprecated. [ 512.244973][ T9700] XFS: noikeep mount option is deprecated. [ 512.261356][ T3689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 512.299919][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 512.541574][ T9732] loop3: detected capacity change from 0 to 2048 [ 512.581015][ T9732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.604944][ T9700] XFS (loop0): Mounting V5 Filesystem [ 512.650815][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 512.679963][ T26] audit: type=1800 audit(1723061087.838:361): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1755" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 512.691848][ T3689] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 512.825075][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.852214][ T9700] XFS (loop0): Ending clean mount [ 512.871867][ T3689] usb 5-1: config 0 descriptor?? [ 512.902430][ T9700] XFS (loop0): Quotacheck needed: Please wait. [ 512.929410][ T3689] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 513.036149][ T9744] loop1: detected capacity change from 0 to 2048 [ 513.061303][ T9700] XFS (loop0): Quotacheck: Done. [ 513.079556][ T9744] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 513.195955][ T9744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.223873][ T7246] XFS (loop0): Unmounting Filesystem [ 513.234231][ T32] usb 5-1: USB disconnect, device number 12 [ 513.270245][ T9746] loop2: detected capacity change from 0 to 128 [ 513.357456][ T9746] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 513.851596][ C1] eth0: bad gso: type: 1, size: 1408 [ 515.080303][ T9750] loop2: detected capacity change from 0 to 32768 [ 515.927141][ T9769] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1765'. [ 516.666919][ T4746] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 516.906914][ T4746] usb 1-1: Using ep0 maxpacket: 8 [ 517.187614][ T4746] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 517.206564][ T4746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.224265][ T9792] loop1: detected capacity change from 0 to 2048 [ 517.233156][ T4746] usb 1-1: Product: syz [ 517.250081][ T4746] usb 1-1: Manufacturer: syz [ 517.258873][ T4746] usb 1-1: SerialNumber: syz [ 517.281815][ T9792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.291544][ T4746] usb 1-1: config 0 descriptor?? [ 517.328350][ T26] audit: type=1800 audit(1723061092.488:362): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1771" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 517.562780][ T4746] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 517.669137][ T4744] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 517.882420][ T9800] device veth1_macvtap left promiscuous mode [ 517.946959][ T4744] usb 4-1: Using ep0 maxpacket: 32 [ 517.956677][ T9800] device veth1_macvtap entered promiscuous mode [ 518.228436][ T4744] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 518.249058][ T4744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.282815][ T4744] usb 4-1: Product: syz [ 518.287141][ T4744] usb 4-1: Manufacturer: syz [ 518.296896][ T4744] usb 4-1: SerialNumber: syz [ 518.314848][ T4744] usb 4-1: config 0 descriptor?? [ 518.369074][ T4744] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 518.577054][ T4744] gspca_sn9c2028: read1 error -71 [ 518.596972][ T4744] gspca_sn9c2028: read1 error -71 [ 518.616912][ T4744] gspca_sn9c2028: read1 error -71 [ 518.622047][ T4744] sn9c2028: probe of 4-1:0.0 failed with error -71 [ 518.647947][ T4744] usb 4-1: USB disconnect, device number 20 [ 519.152734][ T4746] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 519.173354][ T4746] usb 1-1: USB disconnect, device number 15 [ 519.723787][ T9807] loop2: detected capacity change from 0 to 2048 [ 519.734584][ T9809] loop4: detected capacity change from 0 to 256 [ 519.736630][ T9810] loop0: detected capacity change from 0 to 512 [ 519.830688][ T9807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 519.952575][ T9810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 519.989052][ T9818] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 519.991247][ T9810] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038 (0x7fffffff) [ 520.198858][ T8974] EXT4-fs (loop2): unmounting filesystem. [ 520.866880][ T9829] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 521.219400][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 521.404809][ T9834] loop1: detected capacity change from 0 to 256 [ 521.651858][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 521.705241][ T9825] loop2: detected capacity change from 0 to 32768 [ 521.742761][ T9825] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1784 (9825) [ 521.832837][ T9825] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 521.902267][ T9825] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 521.936963][ T9825] BTRFS info (device loop2): setting nodatacow, compression disabled [ 521.945136][ T9825] BTRFS info (device loop2): enabling auto defrag [ 521.973776][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1791'. [ 521.990329][ T9825] BTRFS info (device loop2): max_inline at 0 [ 521.996395][ T9825] BTRFS info (device loop2): using free space tree [ 521.998985][ T9371] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 522.030419][ T9371] FAT-fs (loop1): Filesystem has been set read-only [ 522.041498][ T9371] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 523.212644][ T9876] Cannot find add_set index 0 as target [ 523.250464][ T9875] loop3: detected capacity change from 0 to 512 [ 523.333045][ T9875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 523.379239][ T9875] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038 (0x7fffffff) [ 523.415866][ T9876] IPv6: syztnl2: Disabled Multicast RS [ 523.423433][ T9844] loop0: detected capacity change from 0 to 32768 [ 523.430718][ T9880] Cannot find add_set index 0 as target [ 523.468876][ T9844] XFS: ikeep mount option is deprecated. [ 523.474474][ T9844] XFS: ikeep mount option is deprecated. [ 523.587241][ T9882] Cannot find add_set index 0 as target [ 523.615463][ T9844] XFS (loop0): Mounting V5 Filesystem [ 524.020620][ T3712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.040114][ T9894] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 524.114747][ T9844] XFS (loop0): Ending clean mount [ 524.284396][ T9844] XFS (loop0): Quotacheck needed: Please wait. [ 524.316299][ T9882] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1796'. [ 524.463647][ T3656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.477899][ T3656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.495661][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.512685][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.525901][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 524.537248][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.561288][ T8974] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 524.638734][ T3712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.979812][ T9844] XFS (loop0): Quotacheck: Done. [ 525.037880][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 525.090465][ T7246] XFS (loop0): Unmounting Filesystem [ 525.092332][ T3712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.381686][ T9908] loop4: detected capacity change from 0 to 256 [ 525.392978][ T9902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.436305][ T9908] FAT-fs (loop4): Unrecognized mount option "iocharse]=cp437" or missing value [ 525.453951][ T3712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.778676][ T9896] chnl_net:caif_netlink_parms(): no params data found [ 526.074678][ T9907] loop2: detected capacity change from 0 to 32768 [ 526.135218][ T9907] XFS (loop2): Mounting V5 Filesystem [ 526.305241][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.376926][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.402642][ T9907] XFS (loop2): Ending clean mount [ 526.438067][ T9896] device bridge_slave_0 entered promiscuous mode [ 526.488440][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.495596][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.544750][ T9896] device bridge_slave_1 entered promiscuous mode [ 526.659111][ T3648] Bluetooth: hci1: command tx timeout [ 526.810674][ T8974] XFS (loop2): Unmounting Filesystem [ 526.922699][ T9945] loop3: detected capacity change from 0 to 512 [ 527.599488][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.632773][ T9944] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1811'. [ 527.676634][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.772412][ T9949] loop4: detected capacity change from 0 to 512 [ 527.846359][ T9949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 527.873541][ T9949] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 527.911236][ T9957] loop3: detected capacity change from 0 to 2048 [ 527.944244][ T9957] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 527.963961][ T9957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.043774][ T9896] team0: Port device team_slave_0 added [ 528.329251][ T9896] team0: Port device team_slave_1 added [ 528.581361][ T9965] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 528.716977][ T3648] Bluetooth: hci1: command tx timeout [ 529.102027][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.110685][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.146434][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.259400][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.266403][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.304748][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.538532][ T8924] EXT4-fs (loop4): unmounting filesystem. [ 529.761802][ T9984] program syz.2.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.806895][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.864545][ T9896] device hsr_slave_0 entered promiscuous mode [ 529.887798][ T9896] device hsr_slave_1 entered promiscuous mode [ 529.925698][ T9896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.962569][ T9896] Cannot create hsr debugfs directory [ 530.215804][ T9990] loop4: detected capacity change from 0 to 4096 [ 530.241899][ T9990] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 530.283894][ T4024] udevd[4024]: incorrect nilfs2 checksum on /dev/loop4 [ 530.331825][ T9990] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 530.429187][ T3712] device hsr_slave_0 left promiscuous mode [ 530.458592][ T3712] device hsr_slave_1 left promiscuous mode [ 530.475793][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.496366][ T9994] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.518267][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.580405][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.592242][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.639847][ T3712] device bridge_slave_1 left promiscuous mode [ 530.668296][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.692999][ T3712] device bridge_slave_0 left promiscuous mode [ 530.718070][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.797173][ T3648] Bluetooth: hci1: command tx timeout [ 530.913924][ T3712] device veth1_macvtap left promiscuous mode [ 530.933697][ T3712] device veth0_macvtap left promiscuous mode [ 530.947225][ T3712] device veth1_vlan left promiscuous mode [ 530.953622][ T3712] device veth0_vlan left promiscuous mode [ 531.354193][ T9988] loop2: detected capacity change from 0 to 40427 [ 531.414126][T10002] loop0: detected capacity change from 0 to 1764 [ 531.430774][ T9988] F2FS-fs (loop2): Found nat_bits in checkpoint [ 531.634904][ T9988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 531.697728][T10011] loop3: detected capacity change from 0 to 512 [ 531.740672][T10015] loop0: detected capacity change from 0 to 256 [ 531.776049][T10011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 531.806505][T10011] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038 (0x7fffffff) [ 531.861788][T10020] loop4: detected capacity change from 0 to 512 [ 531.903198][ T9988] syz.2.1824: attempt to access beyond end of device [ 531.903198][ T9988] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 531.929554][T10020] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.053755][T10019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 532.276854][ T6294] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 532.516850][ T6294] usb 1-1: Using ep0 maxpacket: 32 [ 532.637954][ T6294] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 532.654400][ T6294] usb 1-1: config 0 has no interface number 0 [ 532.681186][ T6294] usb 1-1: config 0 interface 217 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 532.782496][ T4745] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 532.857807][ T6294] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 532.880142][ T6294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.887313][ T3648] Bluetooth: hci1: command tx timeout [ 532.899796][ T6294] usb 1-1: Product: syz [ 532.904245][ T6294] usb 1-1: Manufacturer: syz [ 532.924724][ T6294] usb 1-1: SerialNumber: syz [ 532.938775][ T6294] usb 1-1: config 0 descriptor?? [ 533.052440][ T6294] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 533.095665][ T6294] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 534.163728][ T4744] usb 1-1: USB disconnect, device number 16 [ 534.172623][ T4744] ftdi_sio 1-1:0.217: device disconnected [ 534.492727][ T4745] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 534.502553][ T4745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.518927][ T4745] usb 5-1: Product: syz [ 534.523151][ T4745] usb 5-1: Manufacturer: syz [ 534.532120][ T4745] usb 5-1: SerialNumber: syz [ 534.540972][ T4745] usb 5-1: config 0 descriptor?? [ 534.825759][ T3712] team0 (unregistering): Port device team_slave_1 removed [ 535.194358][ T3712] team0 (unregistering): Port device team_slave_0 removed [ 535.307132][ T4745] usb 5-1: Firmware version (0.0) predates our first public release. [ 535.315525][ T4745] usb 5-1: Please update to version 0.2 or newer [ 535.388568][ T4745] usb 5-1: Firmware: build [ 535.394649][ T3712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.466678][ T3712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.224734][ T3712] bond0 (unregistering): Released all slaves [ 536.432425][ T4745] usb 5-1: USB disconnect, device number 13 [ 536.447725][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 536.801856][T10061] loop2: detected capacity change from 0 to 512 [ 536.806231][T10063] loop3: detected capacity change from 0 to 1024 [ 536.850066][T10063] hfsplus: type requires a 4 character value [ 536.856492][T10063] hfsplus: unable to parse mount options [ 536.927938][T10061] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 536.936008][T10061] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 537.034567][T10061] EXT4-fs (loop2): 1 truncate cleaned up [ 537.059743][T10061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 537.103033][T10061] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.1850: Logical block already allocated [ 537.122814][T10061] EXT4-fs (loop2): Remounting filesystem read-only [ 537.164714][T10066] loop0: detected capacity change from 0 to 1024 [ 537.175631][T10061] EXT4-fs error (device loop2): __ext4_remount:6425: comm syz.2.1850: Abort forced by user [ 537.211247][T10066] hfsplus: invalid attributes max_key_len 0 [ 537.217583][T10066] hfsplus: failed to load attributes file [ 537.730664][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 537.818859][ T4024] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 537.994734][ T8974] EXT4-fs (loop2): unmounting filesystem. [ 540.254575][T10082] netlink: 'syz.2.1854': attribute type 3 has an invalid length. [ 541.625148][T10097] loop4: detected capacity change from 0 to 512 [ 541.644210][T10099] loop0: detected capacity change from 0 to 512 [ 541.720401][T10099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 541.729754][T10097] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1858: casefold flag without casefold feature [ 541.761790][T10099] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038 (0x7fffffff) [ 541.777195][T10097] EXT4-fs (loop4): 1 truncate cleaned up [ 541.794672][T10097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 541.914802][ T9896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 542.066035][T10114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1863'. [ 542.147169][ T9896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 542.188713][ T9896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 542.227189][T10099] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 542.274357][ T9896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 542.277331][T10097] loop4: detected capacity change from 512 to 0 [ 542.456780][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 542.661415][ T8924] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 36: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 542.751290][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.798688][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.810253][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.831952][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.854202][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.872417][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.902471][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.909667][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.931161][ T8924] EXT4-fs (loop4): unmounting filesystem. [ 542.979311][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.999150][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.031956][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.057539][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.064692][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.116295][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.299569][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.314559][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.341904][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.399715][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.443192][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.462914][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.487603][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.512774][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.534341][ T9896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.568562][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.593529][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.637831][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.377240][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.384800][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.423997][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.506402][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.531099][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.578423][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.590228][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.614996][ T9896] device veth0_vlan entered promiscuous mode [ 544.623417][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.632635][ T3653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 544.649460][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.657039][ T3653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 544.667282][ T3653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 544.681064][ T3653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 544.689000][ T3653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 544.690606][ T9896] device veth1_vlan entered promiscuous mode [ 544.702518][ T3653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.717778][ T4742] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 544.830124][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.847873][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.873884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.915432][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.967093][ T9896] device veth0_macvtap entered promiscuous mode [ 545.000628][ T9896] device veth1_macvtap entered promiscuous mode [ 545.097185][ T4742] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.117563][ T4742] usb 4-1: config 0 has no interfaces? [ 545.133372][ T4742] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 545.151349][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.162166][ T4742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.179073][ T4742] usb 4-1: config 0 descriptor?? [ 545.187104][T10166] loop2: detected capacity change from 0 to 256 [ 545.195294][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.231535][T10166] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 545.243893][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.288269][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.305325][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.316534][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.328489][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.339055][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.349213][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.360893][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.392200][T10168] loop0: detected capacity change from 0 to 8192 [ 545.403326][T10168] FAT-fs (loop0): Unrecognized mount option "GPL" or missing value [ 545.409810][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.464189][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.473228][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 545.483594][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.493171][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.506524][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.520060][ T4021] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 545.534829][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.544908][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.589534][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.615311][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.636923][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.646967][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.658935][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.672455][ T9896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.685436][ T9896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.707742][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.719036][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 545.741068][T10170] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1885'. [ 545.802488][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.833316][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.848939][ T9896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.894697][ T9896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.914600][ T9896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.933734][ T9896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.986627][ T4740] usb 4-1: USB disconnect, device number 21 [ 546.076182][T10175] loop0: detected capacity change from 0 to 1024 [ 546.214699][T10175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 546.311141][ T3994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.314425][T10159] chnl_net:caif_netlink_parms(): no params data found [ 546.337265][ T3994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.415983][ T26] audit: type=1800 audit(1723061121.568:363): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1887" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 546.573689][ T3712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.585666][T10181] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 546.644419][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.665393][T10181] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8191 with max blocks 2 with error 28 [ 546.747602][T10181] EXT4-fs (loop0): This should not happen!! Data will be lost [ 546.747602][T10181] [ 546.764172][T10181] EXT4-fs (loop0): Total free blocks count 0 [ 546.782022][T10181] EXT4-fs (loop0): Free/Dirty block details [ 546.805154][T10181] EXT4-fs (loop0): free_blocks=68451041280 [ 546.813145][ T3653] Bluetooth: hci3: command tx timeout [ 546.851913][T10181] EXT4-fs (loop0): dirty_blocks=32 [ 546.902798][ T3712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.297097][T10181] EXT4-fs (loop0): Block reservation details [ 547.303157][T10181] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 547.345605][ T5713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.366823][ T5713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.487762][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 547.490801][T10173] loop2: detected capacity change from 0 to 32768 [ 547.506700][T10173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1886 (10173) [ 547.524309][ T3712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.557791][T10173] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 547.607184][T10173] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 547.616176][T10173] BTRFS info (device loop2): using free space tree [ 547.648338][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 547.676452][T10187] netlink: 'syz.3.1889': attribute type 4 has an invalid length. [ 547.880954][T10173] BTRFS info (device loop2): enabling ssd optimizations [ 547.947893][ T3712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.046360][ T26] audit: type=1326 audit(1723061123.198:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62d93779f9 code=0x0 [ 548.142667][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.187030][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.208925][T10159] device bridge_slave_0 entered promiscuous mode [ 548.242158][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.266244][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.312168][T10159] device bridge_slave_1 entered promiscuous mode [ 548.325363][ T8974] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.443129][T10159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.544893][T10225] loop1: detected capacity change from 0 to 1024 [ 548.580484][T10159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.582389][T10225] hfsplus: unable to parse mount options [ 548.876995][ T3653] Bluetooth: hci3: command tx timeout [ 549.124310][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 549.174213][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.210774][T10225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 549.385768][T10235] loop3: detected capacity change from 0 to 8192 [ 549.443389][T10235] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 549.514427][T10159] team0: Port device team_slave_0 added [ 549.521986][T10235] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 549.547781][T10235] REISERFS (device loop3): using ordered data mode [ 549.562105][T10159] team0: Port device team_slave_1 added [ 549.608790][T10235] reiserfs: using flush barriers [ 549.649965][T10235] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 549.702188][T10244] loop0: detected capacity change from 0 to 2048 [ 549.721938][T10235] REISERFS (device loop3): checking transaction log (loop3) [ 549.893333][T10244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 549.948789][T10159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.955771][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.990976][T10159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.047254][T10159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.096957][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.120246][T10235] REISERFS (device loop3): Using tea hash to sort names [ 550.136516][T10235] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 550.246487][T10159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.293134][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 550.506296][T10257] loop0: detected capacity change from 0 to 256 [ 550.600019][T10257] exfat: Deprecated parameter 'namecase' [ 550.605841][T10257] exfat: Bad value for 'gid' [ 550.661380][T10159] device hsr_slave_0 entered promiscuous mode [ 550.709243][T10159] device hsr_slave_1 entered promiscuous mode [ 550.754821][T10159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.791006][T10159] Cannot create hsr debugfs directory [ 550.957854][ T3653] Bluetooth: hci3: command tx timeout [ 551.115802][ T6294] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 551.413336][T10269] loop2: detected capacity change from 0 to 256 [ 551.507990][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 551.529551][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 551.569357][ T6294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 551.600147][ T6294] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 551.621443][ T6294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.673854][ T6294] usb 4-1: config 0 descriptor?? [ 551.765293][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 552.031461][ T4740] usb 4-1: USB disconnect, device number 22 [ 552.253661][T10267] loop1: detected capacity change from 0 to 32768 [ 552.412294][T10267] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 552.463135][T10267] XFS (loop1): Quotacheck needed: Please wait. [ 552.476233][ T3712] device hsr_slave_0 left promiscuous mode [ 552.481763][ T3995] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 552.496430][ T3995] XFS (loop1): Unmount and run xfs_repair [ 552.502331][ T3995] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 552.502401][ T3712] device hsr_slave_1 left promiscuous mode [ 552.509829][ T3995] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 552.509850][ T3995] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 552.509867][ T3995] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 552.509885][ T3995] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 552.509902][ T3995] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 552.509920][ T3995] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 552.509937][ T3995] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 552.509954][ T3995] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 552.509980][ T3995] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 552.600324][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.614495][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.615980][ T3995] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 552.636964][ T3995] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 552.646985][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.655608][T10267] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 552.678401][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.700328][ T3712] device bridge_slave_1 left promiscuous mode [ 552.701511][T10267] UBIFS error (pid: 10267): cannot open "./file0", error -22 [ 552.709595][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.753655][ T9896] XFS (loop1): Unmounting Filesystem [ 552.759859][ T3712] device bridge_slave_0 left promiscuous mode [ 552.766154][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.872763][ T3712] device veth1_macvtap left promiscuous mode [ 552.879272][ T3712] device veth0_macvtap left promiscuous mode [ 552.885570][ T3712] device veth1_vlan left promiscuous mode [ 552.891641][ T3712] device veth0_vlan left promiscuous mode [ 553.046915][ T3653] Bluetooth: hci3: command tx timeout [ 553.877516][T10306] loop0: detected capacity change from 0 to 4096 [ 553.884504][T10306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 553.946595][T10306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 554.064707][T10306] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #15: comm syz.0.1917: corrupted inode contents [ 554.106809][T10306] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #15: comm syz.0.1917: mark_inode_dirty error [ 554.118811][T10306] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #15: comm syz.0.1917: corrupted inode contents [ 554.136988][T10306] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1917: mark_inode_dirty error [ 554.175979][T10306] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #15: comm syz.0.1917: corrupted inode contents [ 554.190897][T10306] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.1917: mark_inode_dirty error [ 554.210615][T10306] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #15: comm syz.0.1917: corrupted inode contents [ 554.280235][T10306] EXT4-fs error (device loop0): ext4_truncate:4300: inode #15: comm syz.0.1917: mark_inode_dirty error [ 554.314101][T10306] EXT4-fs error (device loop0) in ext4_setattr:5611: Corrupt filesystem [ 554.340016][T10309] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #15: comm syz.0.1917: corrupted inode contents [ 554.520372][ T7246] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 554.570134][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 554.577360][ T3712] team0 (unregistering): Port device team_slave_1 removed [ 554.683673][ T3712] team0 (unregistering): Port device team_slave_0 removed [ 554.749708][ T3712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.824341][ T3712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.589446][ T3712] bond0 (unregistering): Released all slaves [ 555.942701][T10159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 556.009857][T10159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 556.069986][T10319] loop2: detected capacity change from 0 to 1024 [ 556.089003][T10159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.108986][T10159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.125861][T10319] hfsplus: unable to parse mount options [ 556.277267][T10324] loop1: detected capacity change from 0 to 736 [ 556.309486][T10320] loop0: detected capacity change from 0 to 2048 [ 556.406869][T10320] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 556.455596][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 556.487198][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.495886][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 556.530198][T10320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.587732][T10320] UDF-fs: warning (device loop0): udf_rmdir: empty directory has nlink != 2 (0) [ 556.599955][T10327] Symlink component flag not implemented [ 556.605869][T10327] Symlink component flag not implemented (121) [ 556.675228][ T26] audit: type=1326 audit(1723061131.828:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 556.741653][ T26] audit: type=1326 audit(1723061131.868:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 556.854737][T10330] loop3: detected capacity change from 0 to 1024 [ 556.903077][T10330] EXT4-fs: Ignoring removed orlov option [ 556.927276][T10330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.944692][ T26] audit: type=1326 audit(1723061131.868:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 556.969905][T10159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.971903][T10331] loop1: detected capacity change from 0 to 256 [ 557.048040][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 557.076575][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.077226][T10330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.097224][T10159] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.131863][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 557.144526][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.176179][ T26] audit: type=1326 audit(1723061131.878:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 557.212764][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.220040][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.455075][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 557.465371][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 557.492283][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 557.509019][ T26] audit: type=1326 audit(1723061131.878:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 558.627584][ T26] audit: type=1326 audit(1723061131.878:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f673a1779f9 code=0x7ffc0000 [ 558.755937][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.763064][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.820462][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 558.849292][ T26] audit: type=1326 audit(1723061131.878:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f673a177a33 code=0x7ffc0000 [ 558.859447][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 558.998321][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 559.036629][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 559.053349][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 559.102955][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 559.166526][ T26] audit: type=1326 audit(1723061131.928:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f673a1764df code=0x7ffc0000 [ 559.260577][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 559.294695][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 559.347605][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 559.356150][ T26] audit: type=1326 audit(1723061131.928:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f673a177a87 code=0x7ffc0000 [ 559.367756][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.494074][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 559.512777][ T26] audit: type=1326 audit(1723061131.948:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f673a176390 code=0x7ffc0000 [ 559.527607][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.623506][T10159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 560.409443][T10364] loop0: detected capacity change from 0 to 2048 [ 561.319880][T10370] loop3: detected capacity change from 0 to 512 [ 561.385012][T10370] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1935: casefold flag without casefold feature [ 561.398801][T10370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.1935: missing EA_INODE flag [ 561.417401][T10370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1935: error while reading EA inode 2 err=-117 [ 561.437257][T10370] EXT4-fs (loop3): 1 orphan inode deleted [ 561.446340][T10370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 561.466203][T10368] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1935: Directory hole found for htree leaf block 0 [ 561.498421][T10364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 561.800710][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 561.816626][T10159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.897287][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.904989][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 562.483454][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.489968][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 562.496873][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.695021][ T7246] EXT4-fs (loop0): unmounting filesystem. [ 562.912231][T10395] loop2: detected capacity change from 0 to 512 [ 562.932324][T10395] EXT4-fs (loop2): filesystem is read-only [ 563.181092][T10401] loop3: detected capacity change from 0 to 1024 [ 563.236536][T10401] hfsplus: unable to parse mount options [ 563.310897][ T4024] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.320629][ T6301] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 563.375237][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.397627][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.445737][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 563.521639][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.554730][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 563.687155][ T6301] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 563.753414][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 563.768377][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.787768][T10159] device veth0_vlan entered promiscuous mode [ 563.814923][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.817088][ T6301] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.838246][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.863284][ T6301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 563.878740][T10159] device veth1_vlan entered promiscuous mode [ 563.905355][ T6301] usb 3-1: SerialNumber: syz [ 563.940259][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 563.953439][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 563.974094][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 563.977984][ T6301] usb 3-1: bad CDC descriptors [ 563.997372][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.042480][T10159] device veth0_macvtap entered promiscuous mode [ 564.082109][T10159] device veth1_macvtap entered promiscuous mode [ 564.128584][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.156972][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.204751][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.204947][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1945'. [ 564.215628][ T5048] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 564.251689][T10407] loop0: detected capacity change from 0 to 512 [ 564.262396][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.282716][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.316548][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.340214][T10407] EXT4-fs: old and new quota format mixing [ 564.351866][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.354604][ T32] usb 3-1: USB disconnect, device number 26 [ 564.394541][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.436824][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.450295][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.488807][T10159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.499066][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 564.509371][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 564.546801][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 564.557001][ T5048] usb 2-1: Using ep0 maxpacket: 32 [ 564.588690][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 564.605360][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.633974][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.651868][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.677079][ T5048] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 564.690978][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.703973][ T5048] usb 2-1: config 0 has no interface number 0 [ 564.716956][ T5048] usb 2-1: config 0 interface 217 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 564.729055][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.752417][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.772407][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.786590][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.801262][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.822388][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.856018][T10159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.873446][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.885389][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.905354][T10159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.917152][ T5048] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 564.936392][ T5048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.941263][T10159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.960649][ T5048] usb 2-1: Product: syz [ 564.965460][ T5048] usb 2-1: Manufacturer: syz [ 564.970939][ T5048] usb 2-1: SerialNumber: syz [ 564.976083][T10159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.987982][ T5048] usb 2-1: config 0 descriptor?? [ 565.001903][T10159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.049065][ T5048] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 565.074905][ T5048] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 565.500801][ T3995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.503771][ T5725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.607377][ T6301] usb 2-1: USB disconnect, device number 20 [ 565.926959][ T6301] ftdi_sio 2-1:0.217: device disconnected [ 565.984181][ T5725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.004110][ T3995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.068398][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 566.102618][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 566.138831][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'. [ 566.351310][T10426] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 566.351310][T10426] SȘȞZ6' [ 566.576888][T10428] loop3: detected capacity change from 0 to 2048 [ 567.529827][T10428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 568.580000][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 568.742708][T10455] loop1: detected capacity change from 0 to 1024 [ 568.846998][T10455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 569.122838][T10468] loop2: detected capacity change from 0 to 1024 [ 569.135848][T10466] loop0: detected capacity change from 0 to 1024 [ 569.156193][T10468] EXT4-fs: Ignoring removed nobh option [ 569.216297][T10466] hfsplus: unable to parse mount options [ 569.231012][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 569.231028][ T26] audit: type=1800 audit(1723061144.388:401): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1959" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 569.231975][T10468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 569.330628][ T26] audit: type=1804 audit(1723061144.488:402): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1964" name="/newroot/73/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 569.355115][T10468] EXT4-fs (loop2): shut down requested (2) [ 569.439084][ T6294] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 569.449849][T10472] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 569.467272][T10472] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8191 with max blocks 2 with error 28 [ 569.479900][T10472] EXT4-fs (loop1): This should not happen!! Data will be lost [ 569.479900][T10472] [ 569.489739][T10472] EXT4-fs (loop1): Total free blocks count 0 [ 569.495894][T10472] EXT4-fs (loop1): Free/Dirty block details [ 569.501989][T10472] EXT4-fs (loop1): free_blocks=68451041280 [ 569.507951][T10472] EXT4-fs (loop1): dirty_blocks=32 [ 569.513211][T10472] EXT4-fs (loop1): Block reservation details [ 569.519361][T10472] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 569.661626][ T8974] EXT4-fs (loop2): unmounting filesystem. [ 569.672372][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 569.817855][T10475] loop2: detected capacity change from 0 to 256 [ 569.857065][ T6294] usb 5-1: config 0 has no interfaces? [ 569.862748][ T6294] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.887335][ T6294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.968214][ T6294] usb 5-1: config 0 descriptor?? [ 569.982261][T10466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 570.079436][T10466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.119899][T10466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 570.340572][ T4739] usb 5-1: USB disconnect, device number 14 [ 571.291431][ T9896] EXT4-fs (loop1): unmounting filesystem. [ 571.366918][ T4287] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 571.388143][ T7982] EXT4-fs (loop3): unmounting filesystem. [ 571.944203][T10497] xt_hashlimit: max too large, truncated to 1048576 [ 571.977062][ T4287] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 571.991607][ T4287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.019140][ T4287] usb 3-1: Product: syz [ 572.046844][ T4287] usb 3-1: Manufacturer: syz [ 572.051497][ T4287] usb 3-1: SerialNumber: syz [ 572.087528][T10499] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 572.110316][ T4287] usb 3-1: config 0 descriptor?? [ 572.273405][T10499] [ 572.275781][T10499] ====================================================== [ 572.282821][T10499] WARNING: possible circular locking dependency detected [ 572.290250][T10499] 6.1.103-syzkaller #0 Not tainted [ 572.295350][T10499] ------------------------------------------------------ [ 572.302356][T10499] syz.0.1974/10499 is trying to acquire lock: [ 572.308410][T10499] ffff888012ca0400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_bmap+0x4b/0x410 [ 572.317993][T10499] [ 572.317993][T10499] but task is already holding lock: [ 572.325352][T10499] ffff88814bc583f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40 [ 572.336016][T10499] [ 572.336016][T10499] which lock already depends on the new lock. [ 572.336016][T10499] [ 572.346435][T10499] [ 572.346435][T10499] the existing dependency chain (in reverse order) is: [ 572.355442][T10499] [ 572.355442][T10499] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 572.364217][T10499] lock_acquire+0x1f8/0x5a0 [ 572.369248][T10499] mutex_lock_io_nested+0x134/0xab0 [ 572.374973][T10499] jbd2_journal_flush+0x29b/0xc40 [ 572.380524][T10499] ext4_ioctl+0x3986/0x5f60 [ 572.385556][T10499] __se_sys_ioctl+0xf1/0x160 [ 572.390675][T10499] do_syscall_64+0x3b/0xb0 [ 572.395617][T10499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.402219][T10499] [ 572.402219][T10499] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 572.410226][T10499] lock_acquire+0x1f8/0x5a0 [ 572.415288][T10499] __mutex_lock+0x132/0xd80 [ 572.420355][T10499] jbd2_journal_lock_updates+0x2b0/0x380 [ 572.426701][T10499] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 572.433318][T10499] ext4_fileattr_set+0xe04/0x1770 [ 572.438892][T10499] vfs_fileattr_set+0x8f3/0xd30 [ 572.444272][T10499] do_vfs_ioctl+0x1cd1/0x2a90 [ 572.449466][T10499] __se_sys_ioctl+0x81/0x160 [ 572.454581][T10499] do_syscall_64+0x3b/0xb0 [ 572.459520][T10499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.465955][T10499] [ 572.465955][T10499] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 572.474444][T10499] lock_acquire+0x1f8/0x5a0 [ 572.479487][T10499] percpu_down_write+0x50/0x2f0 [ 572.484854][T10499] ext4_ind_migrate+0x254/0x760 [ 572.490222][T10499] ext4_fileattr_set+0xe9b/0x1770 [ 572.495771][T10499] vfs_fileattr_set+0x8f3/0xd30 [ 572.501149][T10499] do_vfs_ioctl+0x1cd1/0x2a90 [ 572.506340][T10499] __se_sys_ioctl+0x81/0x160 [ 572.511454][T10499] do_syscall_64+0x3b/0xb0 [ 572.516392][T10499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.522836][T10499] [ 572.522836][T10499] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 572.531440][T10499] validate_chain+0x1661/0x5950 [ 572.536808][T10499] __lock_acquire+0x125b/0x1f80 [ 572.542178][T10499] lock_acquire+0x1f8/0x5a0 [ 572.547202][T10499] down_read+0xad/0xa30 [ 572.551880][T10499] ext4_bmap+0x4b/0x410 [ 572.556553][T10499] bmap+0xa1/0xd0 [ 572.560705][T10499] jbd2_journal_flush+0x5b5/0xc40 [ 572.566250][T10499] ext4_ioctl+0x3986/0x5f60 [ 572.571296][T10499] __se_sys_ioctl+0xf1/0x160 [ 572.576423][T10499] do_syscall_64+0x3b/0xb0 [ 572.581380][T10499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.587846][T10499] [ 572.587846][T10499] other info that might help us debug this: [ 572.587846][T10499] [ 572.598066][T10499] Chain exists of: [ 572.598066][T10499] &sb->s_type->i_mutex_key#8 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 572.598066][T10499] [ 572.613535][T10499] Possible unsafe locking scenario: [ 572.613535][T10499] [ 572.620974][T10499] CPU0 CPU1 [ 572.626329][T10499] ---- ---- [ 572.631685][T10499] lock(&journal->j_checkpoint_mutex); [ 572.637228][T10499] lock(&journal->j_barrier); [ 572.644504][T10499] lock(&journal->j_checkpoint_mutex); [ 572.652559][T10499] lock(&sb->s_type->i_mutex_key#8); [ 572.657940][T10499] [ 572.657940][T10499] *** DEADLOCK *** [ 572.657940][T10499] [ 572.666083][T10499] 2 locks held by syz.0.1974/10499: [ 572.671285][T10499] #0: ffff88814bc58170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 572.682338][T10499] #1: ffff88814bc583f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40 [ 572.693826][T10499] [ 572.693826][T10499] stack backtrace: [ 572.699853][T10499] CPU: 1 PID: 10499 Comm: syz.0.1974 Not tainted 6.1.103-syzkaller #0 [ 572.708004][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 572.718077][T10499] Call Trace: [ 572.721379][T10499] [ 572.724314][T10499] dump_stack_lvl+0x1e3/0x2cb [ 572.729097][T10499] ? nf_tcp_handle_invalid+0x642/0x642 [ 572.734567][T10499] ? print_circular_bug+0x12b/0x1a0 [ 572.739772][T10499] check_noncircular+0x2fa/0x3b0 [ 572.744725][T10499] ? add_chain_block+0x850/0x850 [ 572.749664][T10499] ? lockdep_lock+0x11f/0x2a0 [ 572.754345][T10499] ? _find_first_zero_bit+0xd0/0x100 [ 572.759650][T10499] validate_chain+0x1661/0x5950 [ 572.764506][T10499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 572.770492][T10499] ? reacquire_held_locks+0x660/0x660 [ 572.775885][T10499] ? do_raw_spin_unlock+0x137/0x8a0 [ 572.781193][T10499] ? validate_chain+0x112/0x5950 [ 572.786122][T10499] ? finish_task_switch+0x299/0x810 [ 572.791330][T10499] ? mark_lock+0x9a/0x340 [ 572.795660][T10499] __lock_acquire+0x125b/0x1f80 [ 572.800691][T10499] lock_acquire+0x1f8/0x5a0 [ 572.805205][T10499] ? ext4_bmap+0x4b/0x410 [ 572.809536][T10499] ? read_lock_is_recursive+0x10/0x10 [ 572.815101][T10499] ? __might_sleep+0xb0/0xb0 [ 572.819685][T10499] ? __lock_acquire+0x125b/0x1f80 [ 572.824718][T10499] down_read+0xad/0xa30 [ 572.828902][T10499] ? ext4_bmap+0x4b/0x410 [ 572.833241][T10499] ? bit_waitqueue+0x30/0x30 [ 572.837851][T10499] ? __down_common+0x8b0/0x8b0 [ 572.842621][T10499] ? jbd2_journal_flush+0x374/0xc40 [ 572.847836][T10499] ? __lock_acquire+0x1f80/0x1f80 [ 572.852888][T10499] ? jbd2_cleanup_journal_tail+0x1a7/0x2c0 [ 572.858697][T10499] ? ext4_journalled_write_end+0xec0/0xec0 [ 572.864515][T10499] ext4_bmap+0x4b/0x410 [ 572.868676][T10499] ? ext4_journalled_write_end+0xec0/0xec0 [ 572.874673][T10499] bmap+0xa1/0xd0 [ 572.878311][T10499] jbd2_journal_flush+0x5b5/0xc40 [ 572.883346][T10499] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 572.889166][T10499] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 572.896120][T10499] ext4_ioctl+0x3986/0x5f60 [ 572.900631][T10499] ? kasan_set_track+0x4b/0x70 [ 572.905397][T10499] ? security_file_ioctl+0x6d/0xa0 [ 572.910590][T10499] ? __se_sys_ioctl+0x47/0x160 [ 572.915372][T10499] ? do_syscall_64+0x3b/0xb0 [ 572.919969][T10499] ? ext4_fileattr_set+0x1770/0x1770 [ 572.925435][T10499] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 572.930280][T10499] ? __x64_compat_sys_ioctl+0x80/0x80 [ 572.935643][T10499] ? __lock_acquire+0x1f80/0x1f80 [ 572.940752][T10499] ? lockdep_hardirqs_on+0x94/0x130 [ 572.945945][T10499] ? __kmem_cache_free+0x25c/0x3c0 [ 572.951141][T10499] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 572.956776][T10499] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 572.962425][T10499] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 572.968051][T10499] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 572.973547][T10499] ? __fget_files+0x28/0x4a0 [ 572.978141][T10499] ? __fget_files+0x28/0x4a0 [ 572.982816][T10499] ? __fget_files+0x435/0x4a0 [ 572.987488][T10499] ? __fget_files+0x28/0x4a0 [ 572.992092][T10499] ? bpf_lsm_file_ioctl+0x5/0x10 [ 572.997023][T10499] ? security_file_ioctl+0x7d/0xa0 [ 573.002126][T10499] ? ext4_fileattr_set+0x1770/0x1770 [ 573.007431][T10499] __se_sys_ioctl+0xf1/0x160 [ 573.012027][T10499] do_syscall_64+0x3b/0xb0 [ 573.016444][T10499] ? clear_bhb_loop+0x45/0xa0 [ 573.021120][T10499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.027026][T10499] RIP: 0033:0x7f673a1779f9 [ 573.031436][T10499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.051123][T10499] RSP: 002b:00007f673aeae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.059533][T10499] RAX: ffffffffffffffda RBX: 00007f673a305f80 RCX: 00007f673a1779f9 [ 573.067499][T10499] RDX: 0000000020000280 RSI: 000000004004662b RDI: 000000000000000a [ 573.075464][T10499] RBP: 00007f673a1e58ee R08: 0000000000000000 R09: 0000000000000000 [ 573.083429][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.091582][T10499] R13: 0000000000000000 R14: 00007f673a305f80 R15: 00007fffada10708 [ 573.099552][T10499] [ 573.120746][T10485] loop4: detected capacity change from 0 to 32768 [ 573.201329][T10485] jfs_lookup: dtSearch returned -5 [ 573.262256][T10501] loop1: detected capacity change from 0 to 2048 [ 573.281261][ T5048] usb 3-1: USB disconnect, device number 27 [ 573.333621][T10502] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 573.351179][ T26] audit: type=1800 audit(1723061148.508:403): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1975" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 573.414634][ T26] audit: type=1800 audit(1723061148.508:404): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1975" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 573.489033][ T26] audit: type=1800 audit(1723061148.548:405): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1975" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 579.756826][ T3653] Bluetooth: hci4: command 0x0406 tx timeout