last executing test programs: 7.066116747s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000840), 0x2, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000002b00), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x0, 0x7, 0x29a1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 6.576755363s ago: executing program 0: bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.480519398s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) 6.408430689s ago: executing program 0: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x280400a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3, 0x294, &(0x7f0000000500)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f00000009c0)={'#! ', './file1/file1'}, 0x11) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 6.27610422s ago: executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlateno}, {@numtail}, {@rodir}, {@rodir}, {@numtail}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x217, &(0x7f00000004c0)="$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") openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getpid() r0 = socket(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000040)="22c88cadf16814156bd22363cf2ec80300000000000000359b48a1b9ad26a5a723ac1e895e72bc059ce29b8f61d323d2bece2a2dfe9dd81932468b91fb0fa831bb791d529eb59d5494b34f989f5d2773685a65e034185857f5818a1f59844dcfa489feb779ddca0c9462e6f59dce21113c0b1f5a6f3931fbf4bd6ce1e3c7e46181ec33c1d124fcb0d57ed4874366ed61214d3119fc9411488a8b90100dbc06f865e3d6f22d41ac460e439a245ac559fa0cfcf5a250645ec10c9bda0fc8ca7875b4a776c8e94fac3d232d0de0e9435bbdd586c6bf3ba30000", 0xd8) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 4.212346749s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.125046763s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000018110000000000000000000000009f543178c414337aa3550bb47f28c4f8e75ecfffb8c67478fee90d23b4fb14003443b5541511f8edfec827452014bd779b586cb56ebc6e3cfd1606955e5a4e41d8a0ff9f33822a88d4336972a38d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="3900200000000000400000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.939576361s ago: executing program 4: r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x3000851, &(0x7f00000002c0)={[{@noacl}, {@nodatacow}, {@nossd}, {@barrier}, {@discard}, {@noflushoncommit}, {@usebackuproot}, {@nossd_spread}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x2042023, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYRESOCT, @ANYRES64=r0], 0x0, 0x0, &(0x7f0000000000)) 3.497211399s ago: executing program 3: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.351792142s ago: executing program 3: r0 = gettid() r1 = socket$kcm(0x21, 0x0, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) tkill(r0, 0x7) 3.228461551s ago: executing program 3: getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x67}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="00c3ff", 0xe}, {&(0x7f0000000000)='G', 0x1}], 0x2) 3.10461927s ago: executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.022350473s ago: executing program 3: syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2, &(0x7f00000004c0)={[{@nobarrier}, {@noflushoncommit}, {@subvolid={'subvolid', 0x3d, 0x5213f9d}}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@rescan_uuid_tree}, {@ssd_spread}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e04001220"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) gettid() read(0xffffffffffffffff, 0x0, 0x0) 2.985032009s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0004800c00010000000000040000000c20010000000000", @ANYRES32=r1], 0x60}}, 0x0) 2.84591695s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x502, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 2.494609534s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.388563771s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005a000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 2.146034068s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.517067816s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x1, 0x0) dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 783.898749ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000018110000000000000000000000009f543178c414337aa3550bb47f28c4f8e75ecfffb8c67478fee90d23b4fb14003443b5541511f8edfec827452014bd779b586cb56ebc6e3cfd1606955e5a4e41d8a0ff9f33822a88d4336972a38d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="3900200000000000400000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1}, 0x0) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 578.371001ms ago: executing program 4: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, "9223"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 543.034936ms ago: executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010008}) 526.776149ms ago: executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x17, &(0x7f0000000040)="02000000", 0x4) 433.324793ms ago: executing program 1: r0 = gettid() socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) tkill(r0, 0x7) 342.308067ms ago: executing program 1: socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 275.336857ms ago: executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000001540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 224.816995ms ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 132.2008ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 54.833452ms ago: executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 0s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)}], 0x1}, 0x20004001) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x41) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYRES8=r4], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) write$cgroup_type(r6, &(0x7f0000000000), 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) kernel console output (not intermixed with test programs): tor.1: mark_inode_dirty error [ 185.788702][ T6017] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 185.833681][ T6017] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 186.012961][ T6017] loop1: detected capacity change from 512 to 0 [ 186.039841][ C1] blk_print_req_error: 105 callbacks suppressed [ 186.039859][ C1] I/O error, dev loop1, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 186.055777][ C1] I/O error, dev loop1, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.065476][ C1] I/O error, dev loop1, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 186.075603][ T6031] EXT4-fs error (device loop1): ext4_get_inode_loc:4633: inode #18: block 35: comm syz-executor.1: unable to read itable block [ 186.125838][ T4363] lo_write_bvec: 28 callbacks suppressed [ 186.125854][ T4363] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.171144][ C1] I/O error, dev loop1, sector 84 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 186.180728][ C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 186.190251][ C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 186.193083][ T6017] EXT4-fs error (device loop1): __ext4_find_entry:1684: inode #2: comm syz-executor.1: reading directory lblock 0 [ 186.199708][ C1] buffer_io_error: 28 callbacks suppressed [ 186.199722][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.291487][ T6031] EXT4-fs (loop1): I/O error while writing superblock [ 186.337828][ T6031] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: IO failure [ 186.355479][ T102] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.372491][ T6027] chnl_net:caif_netlink_parms(): no params data found [ 186.377635][ C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 186.388786][ C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 186.398228][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.406524][ T6031] EXT4-fs (loop1): I/O error while writing superblock [ 186.413513][ T6017] EXT4-fs (loop1): previous I/O error to superblock detected [ 186.421511][ T4363] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.421623][ T6031] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #18: comm syz-executor.1: mark_inode_dirty error [ 186.441914][ C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 186.449348][ T6021] chnl_net:caif_netlink_parms(): no params data found [ 186.451622][ C1] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 186.467783][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.476087][ T6017] EXT4-fs (loop1): I/O error while writing superblock [ 186.492887][ T6031] EXT4-fs (loop1): previous I/O error to superblock detected [ 186.532280][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.551241][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.559606][ T6031] EXT4-fs (loop1): I/O error while writing superblock [ 186.639190][ T4986] EXT4-fs error (device loop1): ext4_get_inode_loc:4633: inode #2: block 34: comm syz-executor.1: unable to read itable block [ 186.658744][ T102] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.669111][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.679033][ T4986] EXT4-fs (loop1): I/O error while writing superblock [ 186.697046][ T4986] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: IO failure [ 186.716949][ T102] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.729341][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.737752][ T4986] EXT4-fs (loop1): I/O error while writing superblock [ 186.745587][ T4363] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.780830][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.789222][ T4986] EXT4-fs (loop1): I/O error while writing superblock [ 186.807491][ T3585] Bluetooth: hci2: command tx timeout [ 186.832379][ T38] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.862661][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.894214][ T38] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.907156][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.925628][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.932989][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.934610][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 186.957386][ T6021] device bridge_slave_0 entered promiscuous mode [ 186.965228][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 186.974509][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.982254][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.993829][ T38] Quota error (device loop1): remove_tree: Can't read quota data block 2 [ 187.014231][ T6027] device bridge_slave_0 entered promiscuous mode [ 187.042153][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.052400][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.071250][ T6021] device bridge_slave_1 entered promiscuous mode [ 187.160701][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.176543][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.189674][ T6027] device bridge_slave_1 entered promiscuous mode [ 187.328169][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.363062][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.404208][ T6027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.486157][ T6027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.523184][ T3585] Bluetooth: hci0: command tx timeout [ 187.629742][ T6021] team0: Port device team_slave_0 added [ 187.673734][ T6027] team0: Port device team_slave_0 added [ 187.695093][ T6027] team0: Port device team_slave_1 added [ 187.729928][ T6021] team0: Port device team_slave_1 added [ 187.771284][ T3585] Bluetooth: hci3: command tx timeout [ 187.825091][ T5991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.875594][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.882575][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.911718][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.921494][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.929570][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.937421][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.940786][ T6027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.963898][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.972928][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.994211][ T5991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.010160][ T5991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.030606][ T6027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.039945][ T6027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.078741][ T6027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.101547][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.109746][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.150042][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.194355][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.201844][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.246785][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.266040][ T5991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.376879][ T6027] device hsr_slave_0 entered promiscuous mode [ 188.397439][ T6050] 9pnet: Could not find request transport: fd0x0000000000000004 [ 188.397634][ T6027] device hsr_slave_1 entered promiscuous mode [ 188.423715][ T6027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.432712][ T6027] Cannot create hsr debugfs directory [ 188.488015][ T6021] device hsr_slave_0 entered promiscuous mode [ 188.503323][ T6021] device hsr_slave_1 entered promiscuous mode [ 188.510114][ T6021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.517848][ T6021] Cannot create hsr debugfs directory [ 188.589651][ T4114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.655128][ T4114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.720272][ T4114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.796398][ T4114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.876777][ T6027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.893458][ T3585] Bluetooth: hci2: command tx timeout [ 188.912115][ T6044] chnl_net:caif_netlink_parms(): no params data found [ 188.931724][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.962315][ T6027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.028360][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.036379][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.051932][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.067906][ T6027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.114443][ T4114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.131560][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.145964][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.158753][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.165867][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.178182][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.186892][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.200194][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.207327][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.223551][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.231082][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.242615][ T6044] device bridge_slave_0 entered promiscuous mode [ 189.252064][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.259922][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.268333][ T6044] device bridge_slave_1 entered promiscuous mode [ 189.278477][ T6027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.292351][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.302693][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.335299][ T4114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.374866][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.390180][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.408463][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.417543][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.427872][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.444634][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.474009][ T4114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.492666][ T5991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.503696][ T5991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.516562][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.525207][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.533864][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.542510][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.553703][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.563517][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.573394][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.603103][ T3585] Bluetooth: hci0: command tx timeout [ 189.627696][ T4114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.675388][ T6044] team0: Port device team_slave_0 added [ 189.703722][ T6044] team0: Port device team_slave_1 added [ 189.787399][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.802360][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.838957][ T6044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.853816][ T3585] Bluetooth: hci3: command tx timeout [ 189.878256][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.889173][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.924919][ T6044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.981864][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.997589][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.012073][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.013046][ T3585] Bluetooth: hci1: command tx timeout [ 190.138446][ T6044] device hsr_slave_0 entered promiscuous mode [ 190.154539][ T6044] device hsr_slave_1 entered promiscuous mode [ 190.161349][ T6044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.169850][ T6044] Cannot create hsr debugfs directory [ 190.219672][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.239540][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.400758][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.416853][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.437411][ T5991] device veth0_vlan entered promiscuous mode [ 190.475118][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.483521][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.526960][ T5991] device veth1_vlan entered promiscuous mode [ 190.575635][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.586174][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.594505][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.604188][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.614993][ T5991] device veth0_macvtap entered promiscuous mode [ 190.645311][ T5991] device veth1_macvtap entered promiscuous mode [ 190.677945][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.691245][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.709599][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.721457][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.738199][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.749128][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.759224][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.769764][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.781620][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.827103][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.836404][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.846752][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.861618][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.876313][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.897463][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.913315][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.932501][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.943959][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.963010][ T3585] Bluetooth: hci2: command tx timeout [ 190.968470][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.978494][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.988950][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.000331][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.036896][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.047257][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.071403][ T5991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.089708][ T5991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.100901][ T5991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.120478][ T5991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.309507][ T6027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.365289][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.373918][ T6027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.389788][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.452298][ T6027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.463812][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.494159][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.494391][ T6027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.506829][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.555633][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.684457][ T3585] Bluetooth: hci0: command tx timeout [ 191.704462][ T26] audit: type=1800 audit(1717249758.756:28): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 191.839251][ T6027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.907050][ T6027] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.922121][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.933713][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.933852][ T3585] Bluetooth: hci3: command tx timeout [ 191.995265][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.004537][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.014107][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.021340][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.049688][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.058040][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.067103][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.078684][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.085850][ T4879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.093366][ T48] Bluetooth: hci1: command tx timeout [ 192.094020][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.129839][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.140136][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.166056][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.198693][ T6021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.229368][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.244120][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.253317][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.261702][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.270358][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.287658][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.300614][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.321694][ T6021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.348140][ T4114] device hsr_slave_0 left promiscuous mode [ 192.355643][ T4114] device hsr_slave_1 left promiscuous mode [ 192.362226][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.369875][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.381865][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.398642][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.412643][ T4114] device bridge_slave_1 left promiscuous mode [ 192.424820][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.441176][ T4114] device bridge_slave_0 left promiscuous mode [ 192.450212][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.464137][ T4114] device hsr_slave_0 left promiscuous mode [ 192.470668][ T4114] device hsr_slave_1 left promiscuous mode [ 192.477720][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.488210][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.498090][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.505869][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.517383][ T4114] device bridge_slave_1 left promiscuous mode [ 192.523860][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.540786][ T4114] device bridge_slave_0 left promiscuous mode [ 192.554189][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.599788][ T4114] device hsr_slave_0 left promiscuous mode [ 192.618331][ T4114] device hsr_slave_1 left promiscuous mode [ 192.642332][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.652665][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.671719][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.681100][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.694769][ T4114] device bridge_slave_1 left promiscuous mode [ 192.701087][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.715869][ T4114] device bridge_slave_0 left promiscuous mode [ 192.723617][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.746105][ T4114] device veth1_macvtap left promiscuous mode [ 192.752237][ T4114] device veth0_macvtap left promiscuous mode [ 192.758540][ T4114] device veth1_vlan left promiscuous mode [ 192.764896][ T4114] device veth0_vlan left promiscuous mode [ 192.772564][ T4114] device veth1_macvtap left promiscuous mode [ 192.778987][ T4114] device veth0_macvtap left promiscuous mode [ 192.788102][ T4114] device veth1_vlan left promiscuous mode [ 192.794490][ T4114] device veth0_vlan left promiscuous mode [ 192.806981][ T4114] device veth1_macvtap left promiscuous mode [ 192.819985][ T4114] device veth0_macvtap left promiscuous mode [ 192.833259][ T4114] device veth1_vlan left promiscuous mode [ 192.841935][ T4114] device veth0_vlan left promiscuous mode [ 193.210610][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 193.235611][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 193.248936][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.261922][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.321636][ T4114] bond0 (unregistering): Released all slaves [ 193.444593][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 193.458760][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 193.470934][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.487472][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.550388][ T4114] bond0 (unregistering): Released all slaves [ 193.659087][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 193.679314][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 193.697040][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.711827][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.763402][ T3585] Bluetooth: hci0: command tx timeout [ 193.776838][ T4114] bond0 (unregistering): Released all slaves [ 193.854601][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.865091][ T6021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.926836][ T6021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.003415][ T3585] Bluetooth: hci3: command tx timeout [ 194.010327][ T6044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.050542][ T6044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.118780][ T6044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.126320][ T6090] 9pnet: Could not find request transport: fd0x0000000000000004 [ 194.163139][ T48] Bluetooth: hci1: command tx timeout [ 194.170884][ T6044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.244622][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.250958][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.398481][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.465447][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.482655][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.517884][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.560992][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.578085][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.607401][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.614575][ T4964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.648225][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.686159][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.708410][ T6027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.730338][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.745959][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.763496][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.770601][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.793388][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.800901][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.836132][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.872107][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.881843][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.904574][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.918076][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.929855][ T26] audit: type=1800 audit(1717249761.986:29): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 194.962396][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.988884][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.010258][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.028028][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.055153][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.088197][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.111134][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.141469][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.143688][ T6106] loop3: detected capacity change from 0 to 512 [ 195.167645][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.204814][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.227099][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.232762][ T6106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.236278][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.244749][ T6106] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/5/bus supports timestamps until 2038 (0x7fffffff) [ 195.253224][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.273509][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.287562][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.300743][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.312892][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.320742][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.355727][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.449140][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.462347][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.496616][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.540120][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.597472][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.659116][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.714989][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.861127][ T6044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.921065][ T6044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.969855][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.978697][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.013364][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.022427][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.060419][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.103737][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.119115][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.167246][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.178369][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 196.187526][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.205587][ T6027] device veth0_vlan entered promiscuous mode [ 196.243587][ T48] Bluetooth: hci1: command tx timeout [ 196.248407][ T6027] device veth1_vlan entered promiscuous mode [ 196.268405][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.277166][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.313800][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.377034][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.385870][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.417357][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.438983][ T6027] device veth0_macvtap entered promiscuous mode [ 196.501031][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.524611][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.532851][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.546968][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.560322][ T6027] device veth1_macvtap entered promiscuous mode [ 196.587161][ T6044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.597431][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.619877][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.631306][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.646189][ T6130] loop3: detected capacity change from 0 to 128 [ 196.687394][ T6130] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.704173][ T6130] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/8/mnt supports timestamps until 2038 (0x7fffffff) [ 196.718801][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.746305][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.782536][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 196.821851][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.839290][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.873077][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.912967][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.953481][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.960882][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.977032][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.993801][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.002683][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.029466][ T6044] device veth0_vlan entered promiscuous mode [ 197.045818][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.083064][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.102961][ T6027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.133427][ T6027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.149713][ T6027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.159923][ T6021] device veth0_vlan entered promiscuous mode [ 197.176576][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.192769][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.202789][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.218422][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.228620][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.242056][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.257313][ T6044] device veth1_vlan entered promiscuous mode [ 197.300702][ T6027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.329263][ T6027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.358610][ T6027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.388710][ T6027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.392040][ T6138] 9pnet: Could not find request transport: fd0x0000000000000004 [ 197.448716][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.457631][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.488930][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.513569][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.550689][ T6021] device veth1_vlan entered promiscuous mode [ 197.669329][ T6044] device veth0_macvtap entered promiscuous mode [ 197.694234][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.711009][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.733501][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.761057][ T6021] device veth0_macvtap entered promiscuous mode [ 197.787442][ T6044] device veth1_macvtap entered promiscuous mode [ 197.804872][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.820079][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.840562][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.865331][ T6021] device veth1_macvtap entered promiscuous mode [ 197.895777][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.913324][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.931230][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.973190][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.993400][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.013171][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.032990][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.062995][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.085109][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.094795][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.114679][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.143091][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.163402][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.183493][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.199107][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.209180][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.221982][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.248302][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.278964][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.304003][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.312721][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.323770][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.333354][ T26] audit: type=1800 audit(1717249765.376:30): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 198.361381][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.381098][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.390232][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.405147][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.427733][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.443213][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.458148][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.477272][ T6021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.492784][ T6021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.508391][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.521606][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.538327][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.550759][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.565549][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.579172][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.595963][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.608925][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.623614][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.640332][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.658460][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.670672][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.682698][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.694163][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.714699][ T6021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.731046][ T6021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.739964][ T6021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.754348][ T6021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.772001][ T6044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.784207][ T6044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.797339][ T6044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.823022][ T6044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.860631][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.882011][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.956859][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.114476][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.136093][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.172593][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.211176][ T6156] loop4: detected capacity change from 0 to 512 [ 199.218658][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.227450][ T3953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.240389][ T4111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.259705][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.280741][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.289487][ T4111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.298046][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.317743][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.332704][ T6156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.355687][ T6156] ext4 filesystem being mounted at /root/syzkaller-testdir1946871958/syzkaller.60CWu9/0/file0 supports timestamps until 2038 (0x7fffffff) [ 199.380242][ T6156] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 199.399238][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.409577][ T6156] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz-executor.4: mark_inode_dirty error [ 199.467052][ T6156] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz-executor.4: corrupted inode contents [ 199.479900][ T6156] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 199.576062][ T6165] loop2: detected capacity change from 0 to 2048 [ 199.597770][ T6156] loop4: detected capacity change from 512 to 0 [ 199.622557][ C0] blk_print_req_error: 33 callbacks suppressed [ 199.622573][ C0] I/O error, dev loop4, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 199.638474][ C0] I/O error, dev loop4, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.645984][ T6169] loop3: detected capacity change from 0 to 128 [ 199.648165][ C0] I/O error, dev loop4, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.648764][ T6167] EXT4-fs error (device loop4): ext4_get_inode_loc:4633: inode #18: block 35: comm syz-executor.4: unable to read itable block [ 199.721004][ C0] I/O error, dev loop4, sector 84 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 199.734716][ T4111] lo_write_bvec: 3 callbacks suppressed [ 199.734734][ T4111] loop: Write error at byte offset 9223372036854775807, length 2048. [ 199.757790][ T6021] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 199.759881][ T6156] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz-executor.4: reading directory lblock 0 [ 199.778774][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.778812][ T6021] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 199.788286][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.788311][ C0] buffer_io_error: 3 callbacks suppressed [ 199.788319][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 199.804554][ T6169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 199.815841][ T6156] EXT4-fs (loop4): previous I/O error to superblock detected [ 199.856732][ T6169] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/20/mnt supports timestamps until 2038 (0x7fffffff) [ 199.874590][ T4114] loop: Write error at byte offset 9223372036854775807, length 2048. [ 199.889481][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.899033][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.908522][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 199.916886][ T6156] EXT4-fs (loop4): I/O error while writing superblock [ 199.917008][ T6167] EXT4-fs (loop4): I/O error while writing superblock [ 199.930931][ T6167] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: IO failure [ 199.934378][ T935] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 199.947245][ T4111] loop: Write error at byte offset 9223372036854775807, length 2048. [ 199.959098][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.968701][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 199.978191][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 199.994305][ T6167] EXT4-fs (loop4): I/O error while writing superblock [ 200.005259][ T6167] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #18: comm syz-executor.4: mark_inode_dirty error [ 200.024409][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 200.034003][ T4111] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.042231][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.050532][ T6167] EXT4-fs (loop4): I/O error while writing superblock [ 200.106617][ T6027] EXT4-fs error (device loop4): ext4_get_inode_loc:4633: inode #2: block 34: comm syz-executor.4: unable to read itable block [ 200.131501][ T4111] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.133692][ T6173] 9pnet_fd: Insufficient options for proto=fd [ 200.139771][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.154122][ T6027] EXT4-fs (loop4): I/O error while writing superblock [ 200.161591][ T6027] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: IO failure [ 200.183326][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.212530][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.220860][ T6027] EXT4-fs (loop4): I/O error while writing superblock [ 200.231464][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.252092][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.262906][ T6027] EXT4-fs (loop4): I/O error while writing superblock [ 200.266509][ T4114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.280276][ T935] usb 2-1: Using ep0 maxpacket: 16 [ 200.284905][ T6175] loop3: detected capacity change from 0 to 256 [ 200.286727][ T38] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.317057][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.325432][ T4363] EXT4-fs (loop4): I/O error while writing superblock [ 200.339667][ T38] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.356970][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.370154][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 200.382206][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 200.399873][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 2 [ 200.415689][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 135, changing to 11 [ 200.445096][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8634, setting to 1024 [ 200.479553][ T935] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 200.501077][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.532254][ T935] usb 2-1: config 0 descriptor?? [ 200.678031][ T4114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.836512][ T4114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.898578][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.908578][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.917767][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.927173][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.936839][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.944108][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.989591][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.989824][ T4114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.038607][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.081144][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.147658][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.196051][ T935] hid (null): invalid report_size 58537 [ 201.201660][ T935] hid (null): unknown global tag 0xd [ 201.241397][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x2 [ 201.299849][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.317560][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.334452][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.341889][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.364483][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.371926][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.379635][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.388014][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.395497][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.402988][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.413001][ T935] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 201.420419][ T935] hid-generic 0003:0158:0100.0001: unexpected long global item [ 201.429150][ T935] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 201.441418][ T935] usb 2-1: USB disconnect, device number 2 [ 201.449032][ T6193] 9pnet_fd: Insufficient options for proto=fd [ 201.608847][ T26] audit: type=1804 audit(1717249768.656:31): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2233287084/syzkaller.OFQIeG/125/bus" dev="sda1" ino=1944 res=1 errno=0 [ 201.637546][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 201.667964][ T6201] loop3: detected capacity change from 0 to 256 [ 201.710947][ T26] audit: type=1800 audit(1717249768.756:32): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048766 res=0 errno=0 [ 201.821075][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.828386][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.836803][ T6180] device bridge_slave_0 entered promiscuous mode [ 201.847037][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.854306][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.862667][ T6180] device bridge_slave_1 entered promiscuous mode [ 201.885763][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.898047][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.910235][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.922676][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.931647][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.943688][ T3595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.089248][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.132693][ T6218] loop1: detected capacity change from 0 to 512 [ 202.147022][ T6218] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 202.161648][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.162946][ T6218] EXT4-fs (loop1): invalid journal inode [ 202.211777][ T6218] EXT4-fs (loop1): can't get journal size [ 202.244282][ T6218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.271625][ T6218] EXT4-fs (loop1): 1 truncate cleaned up [ 202.295601][ T6180] team0: Port device team_slave_0 added [ 202.303000][ T6218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 202.375376][ T6180] team0: Port device team_slave_1 added [ 202.459142][ T6044] EXT4-fs (loop1): unmounting filesystem. [ 202.476946][ T6223] loop3: detected capacity change from 0 to 128 [ 202.495259][ T6223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.504686][ T6223] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/28/mnt supports timestamps until 2038 (0x7fffffff) [ 202.562612][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.571058][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.598015][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.599180][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 202.661894][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.669939][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.717632][ T6228] 9pnet_fd: Insufficient options for proto=fd [ 202.736160][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.841469][ T6233] loop1: detected capacity change from 0 to 16 [ 202.863600][ T4114] device hsr_slave_0 left promiscuous mode [ 202.893344][ T4114] device hsr_slave_1 left promiscuous mode [ 202.899102][ T6233] erofs: (device loop1): mounted with root inode @ nid 36. [ 202.919883][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.936236][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.956455][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.976381][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.996587][ T4114] device bridge_slave_1 left promiscuous mode [ 203.007456][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.015922][ T6238] loop1: detected capacity change from 0 to 256 [ 203.031602][ T4114] device bridge_slave_0 left promiscuous mode [ 203.041797][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.050235][ T3595] Bluetooth: hci0: command tx timeout [ 203.051321][ T26] audit: type=1800 audit(1717249770.096:33): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048767 res=0 errno=0 [ 203.092445][ T4114] device veth1_macvtap left promiscuous mode [ 203.102270][ T4114] device veth0_macvtap left promiscuous mode [ 203.108674][ T4114] device veth1_vlan left promiscuous mode [ 203.114763][ T4114] device veth0_vlan left promiscuous mode [ 203.507686][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 203.528070][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 203.550420][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.588877][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.766170][ T4114] bond0 (unregistering): Released all slaves [ 203.844200][ T6180] device hsr_slave_0 entered promiscuous mode [ 203.859979][ T6180] device hsr_slave_1 entered promiscuous mode [ 203.906875][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 204.013718][ T3595] Bluetooth: hci3: command tx timeout [ 204.156183][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.173023][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.181225][ T6211] device bridge_slave_0 entered promiscuous mode [ 204.205167][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.212289][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.233851][ T6211] device bridge_slave_1 entered promiscuous mode [ 204.301922][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.330369][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.389521][ T6211] team0: Port device team_slave_0 added [ 204.397543][ T6211] team0: Port device team_slave_1 added [ 204.535884][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.552997][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.592930][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.625112][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.632089][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.682988][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.827348][ T6211] device hsr_slave_0 entered promiscuous mode [ 204.859923][ T6211] device hsr_slave_1 entered promiscuous mode [ 204.866819][ T6211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.899260][ T6211] Cannot create hsr debugfs directory [ 205.133756][ T3595] Bluetooth: hci0: command tx timeout [ 205.313664][ T6258] loop1: detected capacity change from 0 to 128 [ 205.331390][ T6259] 9pnet_fd: Insufficient options for proto=fd [ 205.337720][ T6180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.381132][ T6263] loop3: detected capacity change from 0 to 512 [ 205.401552][ T6258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 205.410853][ T6258] ext4 filesystem being mounted at /root/syzkaller-testdir183422147/syzkaller.siPRA8/10/mnt supports timestamps until 2038 (0x7fffffff) [ 205.426153][ T6263] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 205.464690][ T6263] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 205.472902][ T6263] System zones: 0-2, 18-18, 34-35 [ 205.480676][ T6044] EXT4-fs (loop1): unmounting filesystem. [ 205.489310][ T6263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.518681][ T6211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.547822][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 205.561298][ T6180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.581599][ T6180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.627205][ T6211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.654997][ T6269] loop3: detected capacity change from 0 to 256 [ 205.667179][ T6180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.702402][ T26] audit: type=1800 audit(1717249772.746:34): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048768 res=0 errno=0 [ 205.746945][ T6211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.824953][ T6211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.879957][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.909131][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.922202][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.946837][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.989216][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.001668][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.021452][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.028628][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.073188][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.081224][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.103593][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.112076][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.119067][ T3595] Bluetooth: hci3: command tx timeout [ 206.119278][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.178590][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.221501][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.326944][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.344856][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.365404][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.378798][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.387824][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.396599][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.411057][ T6180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.433813][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.453254][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.464702][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.474395][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.550531][ T6211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.591383][ T6211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.626183][ T6211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.655300][ T6211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.889036][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.921321][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.935309][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.952217][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.989738][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.004811][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.012762][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.087646][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.097721][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.123527][ T3843] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.130651][ T3843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.153317][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.162083][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.185041][ T3843] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.192206][ T3843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.203186][ T3595] Bluetooth: hci0: command tx timeout [ 207.212511][ T6291] 9pnet_fd: Insufficient options for proto=fd [ 207.219041][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.270175][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.297317][ T6294] loop3: detected capacity change from 0 to 128 [ 207.305066][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.314020][ T3843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.327516][ T6294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.347844][ T6180] device veth0_vlan entered promiscuous mode [ 207.450386][ T6180] device veth1_vlan entered promiscuous mode [ 207.481628][ T6294] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/40/mnt supports timestamps until 2038 (0x7fffffff) [ 207.501589][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.516761][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.528504][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.755616][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 208.245729][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.254154][ T3595] Bluetooth: hci3: command tx timeout [ 208.339994][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.362033][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.370687][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.380304][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.428293][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.436481][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.449748][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.458755][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.466449][ T26] audit: type=1800 audit(1717249775.506:35): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 208.490428][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.499161][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.507757][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.516446][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.544751][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.584214][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.617094][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.633260][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.659555][ T6180] device veth0_macvtap entered promiscuous mode [ 208.686178][ T6180] device veth1_macvtap entered promiscuous mode [ 208.702375][ T6309] loop3: detected capacity change from 0 to 128 [ 208.744892][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.772748][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.790907][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.801513][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.811839][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.822395][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.832632][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.843543][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.860152][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.871959][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.882617][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.893437][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.904221][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.920544][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.937195][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.947226][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.957844][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.971354][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.140296][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.150285][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.158619][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.167542][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.177459][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.186512][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.197950][ T6180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.207711][ T6180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.216556][ T6180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.226848][ T6180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.283564][ T3585] Bluetooth: hci0: command tx timeout [ 209.313446][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.335365][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.343787][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.493151][ T5403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.504749][ T5403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.590316][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.620996][ T6329] 9pnet_fd: Insufficient options for proto=fd [ 209.644550][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.664824][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.700906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.780044][ T6332] loop1: detected capacity change from 0 to 128 [ 209.841511][ T6332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.979534][ T6332] ext4 filesystem being mounted at /root/syzkaller-testdir183422147/syzkaller.siPRA8/20/mnt supports timestamps until 2038 (0x7fffffff) [ 210.065659][ T6340] loop2: detected capacity change from 0 to 512 [ 210.092311][ T6340] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.143229][ T6340] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.158962][ T6044] EXT4-fs (loop1): unmounting filesystem. [ 210.220525][ T6340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 210.235135][ T6340] System zones: 1-12 [ 210.241383][ T6340] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 210.266593][ T6340] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 210.319035][ T4114] device hsr_slave_0 left promiscuous mode [ 210.325195][ T3595] Bluetooth: hci3: command tx timeout [ 210.339274][ T6344] loop1: detected capacity change from 0 to 256 [ 210.355391][ T6340] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 210.371546][ T4114] device hsr_slave_1 left promiscuous mode [ 210.381594][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.389483][ T6340] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 210.408701][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.423400][ T6340] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 210.440959][ T6340] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 210.458196][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.466307][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.475817][ T6340] EXT4-fs (loop2): 1 orphan inode deleted [ 210.484201][ T4114] device bridge_slave_1 left promiscuous mode [ 210.490470][ T6340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.510677][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.520332][ T6347] syz-executor.0[6347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.520439][ T6347] syz-executor.0[6347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.549196][ T4114] device bridge_slave_0 left promiscuous mode [ 210.578394][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.598115][ T4114] device veth1_macvtap left promiscuous mode [ 210.619231][ T4114] device veth0_macvtap left promiscuous mode [ 210.638015][ T4114] device veth1_vlan left promiscuous mode [ 210.655887][ T4114] device veth0_vlan left promiscuous mode [ 210.754016][ T6180] EXT4-fs (loop2): unmounting filesystem. [ 210.770880][ T6349] loop3: detected capacity change from 0 to 256 [ 210.817054][ T26] audit: type=1800 audit(1717249777.866:36): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048773 res=0 errno=0 [ 210.853149][ T935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 211.009390][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 211.031207][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 211.055516][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.072676][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.143097][ T935] usb 1-1: Using ep0 maxpacket: 16 [ 211.200244][ T4114] bond0 (unregistering): Released all slaves [ 211.284962][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.293419][ T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.309806][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.323287][ T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.334898][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.353256][ T935] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.365198][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.373166][ T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.391864][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.393527][ T935] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 211.417363][ T935] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 211.441464][ T6211] device veth0_vlan entered promiscuous mode [ 211.465490][ T6211] device veth1_vlan entered promiscuous mode [ 211.497254][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.507581][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.563266][ T935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.578180][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.603963][ T935] usb 1-1: SerialNumber: syz [ 211.606695][ T6211] device veth0_macvtap entered promiscuous mode [ 211.651115][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.661428][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.664226][ T935] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 211.687341][ T6211] device veth1_macvtap entered promiscuous mode [ 211.692285][ T935] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 211.708994][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.734483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.769716][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.792427][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.815106][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.836031][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.855161][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.876219][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.890001][ T22] usb 1-1: USB disconnect, device number 4 [ 211.895241][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.915791][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.937723][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.954249][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.965638][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.992239][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.024569][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.046073][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.067968][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.088072][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.111513][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.130407][ T6211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.152502][ T6211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.175357][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.201166][ T6211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.211761][ T6211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.220879][ T6211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.252428][ T6211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.269960][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.280161][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.437074][ T4111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.465903][ T4111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.529856][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.550952][ T5403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.579568][ T5403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.600236][ T6369] loop2: detected capacity change from 0 to 128 [ 212.630531][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.683767][ T6369] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.710752][ T6369] ext4 filesystem being mounted at /root/syzkaller-testdir3452271100/syzkaller.6R0apd/5/mnt supports timestamps until 2038 (0x7fffffff) [ 212.840522][ T6180] EXT4-fs (loop2): unmounting filesystem. [ 212.950395][ T26] audit: type=1804 audit(1717249779.996:37): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3452271100/syzkaller.6R0apd/6/bus" dev="sda1" ino=1957 res=1 errno=0 [ 213.079971][ T26] audit: type=1804 audit(1717249779.996:38): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3452271100/syzkaller.6R0apd/6/bus" dev="sda1" ino=1957 res=1 errno=0 [ 213.433043][ T3953] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 213.744395][ T6384] loop3: detected capacity change from 0 to 256 [ 213.788839][ T26] audit: type=1800 audit(1717249780.836:39): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048777 res=0 errno=0 [ 213.855470][ T26] audit: type=1800 audit(1717249780.836:40): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048777 res=0 errno=0 [ 213.858673][ T3953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.921902][ T3953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.949628][ T3953] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 213.987991][ T3953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.024716][ T3953] usb 3-1: config 0 descriptor?? [ 214.039233][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.267288][ T6375] loop4: detected capacity change from 0 to 40427 [ 214.316613][ T6375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 214.420637][ T6375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.471518][ T6375] syz-executor.4: attempt to access beyond end of device [ 214.471518][ T6375] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 214.501089][ T3953] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 214.534809][ T3953] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 214.572245][ T6375] syz-executor.4: attempt to access beyond end of device [ 214.572245][ T6375] loop4: rw=2049, sector=77824, nr_sectors = 544 limit=40427 [ 214.689017][ T6211] syz-executor.4: attempt to access beyond end of device [ 214.689017][ T6211] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 214.703394][ T1529] usb 3-1: USB disconnect, device number 2 [ 215.341736][ T6421] loop3: detected capacity change from 0 to 256 [ 215.380648][ T26] audit: type=1800 audit(1717249782.426:41): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048778 res=0 errno=0 [ 215.435574][ T26] audit: type=1800 audit(1717249782.456:42): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048778 res=0 errno=0 [ 215.459662][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.483479][ T3953] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 215.603619][ T3673] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 215.680894][ T6431] loop1: detected capacity change from 0 to 128 [ 215.708115][ T6431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.726846][ T6431] ext4 filesystem being mounted at /root/syzkaller-testdir183422147/syzkaller.siPRA8/22/mnt supports timestamps until 2038 (0x7fffffff) [ 215.784307][ T6044] EXT4-fs (loop1): unmounting filesystem. [ 215.799794][ T3627] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 215.853799][ T3953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.865810][ T3953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.877013][ T3953] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 215.886404][ T3953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.901163][ T3953] usb 1-1: config 0 descriptor?? [ 216.003894][ T3673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.015047][ T3673] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.024241][ T3673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.035504][ T3673] usb 5-1: config 0 descriptor?? [ 216.193118][ T4879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.395353][ T3953] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 216.404887][ T3953] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 216.417263][ T3627] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=a0.fc [ 216.428128][ T3627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.436273][ T3627] usb 3-1: Product: syz [ 216.440885][ T3627] usb 3-1: Manufacturer: syz [ 216.445533][ T3627] usb 3-1: SerialNumber: syz [ 216.451262][ T3627] usb 3-1: config 0 descriptor?? [ 216.537580][ T3627] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 216.545808][ T3673] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 216.560435][ T3673] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input6 [ 216.613281][ T4879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.624275][ T4879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.634171][ T4879] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 216.652947][ T4879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.662669][ T3673] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 216.677237][ T4879] usb 4-1: config 0 descriptor?? [ 216.695206][ T3673] usb 1-1: USB disconnect, device number 5 [ 216.723580][ T3627] usb 3-1: USB disconnect, device number 3 [ 217.195741][ T4879] sony 0003:054C:024B.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 217.211658][ T4879] sony 0003:054C:024B.0005: failed to claim input [ 217.301562][ T6446] syz-executor.0[6446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.301626][ T6446] syz-executor.0[6446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.388756][ T1529] usb 5-1: USB disconnect, device number 2 [ 217.406825][ T4247] usb 4-1: USB disconnect, device number 3 [ 217.602769][ T6452] loop1: detected capacity change from 0 to 256 [ 217.617468][ T26] audit: type=1800 audit(1717249784.666:43): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048779 res=0 errno=0 [ 217.670812][ T26] audit: type=1800 audit(1717249784.666:44): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048779 res=0 errno=0 [ 217.721999][ T6458] loop1: detected capacity change from 0 to 512 [ 217.759763][ T6458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.770558][ T6458] ext4 filesystem being mounted at /root/syzkaller-testdir183422147/syzkaller.siPRA8/26/file0 supports timestamps until 2038 (0x7fffffff) [ 217.789520][ T6458] EXT4-fs (loop1): unmounting filesystem. [ 218.877536][ T6477] syz-executor.1[6477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.877631][ T6477] syz-executor.1[6477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.928099][ T26] audit: type=1800 audit(1717249785.976:45): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 219.008256][ T26] audit: type=1804 audit(1717249786.006:46): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2233287084/syzkaller.OFQIeG/148/bus" dev="sda1" ino=1952 res=1 errno=0 [ 219.063330][ T4247] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 219.072811][ T26] audit: type=1804 audit(1717249786.016:47): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2233287084/syzkaller.OFQIeG/148/bus" dev="sda1" ino=1952 res=1 errno=0 [ 219.185632][ T6490] loop3: detected capacity change from 0 to 128 [ 219.232791][ T6490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.254523][ T6490] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/57/mnt supports timestamps until 2038 (0x7fffffff) [ 219.433746][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.450396][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 219.459597][ T4247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.474202][ T4247] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 219.502983][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.519610][ T4247] usb 3-1: config 0 descriptor?? [ 220.005351][ T4247] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x0 [ 220.030335][ T4247] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 220.063047][ T1529] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.093062][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 220.211638][ T4879] usb 3-1: USB disconnect, device number 4 [ 220.302960][ T3673] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 220.446494][ T1529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.457656][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.484870][ T1529] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.494243][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.504049][ T1529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.513118][ T41] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 220.533039][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.543134][ T1529] usb 4-1: config 0 descriptor?? [ 220.550709][ T41] usb 5-1: config 0 descriptor?? [ 220.683885][ T3673] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 220.702000][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.719019][ T3673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.743621][ T3673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 220.764104][ T3673] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 220.780836][ T3673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.804968][ T3673] usb 1-1: config 0 descriptor?? [ 221.026940][ T1529] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 221.039056][ T41] sony 0003:054C:024B.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.4-1/input0 [ 221.815550][ T1529] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input7 [ 221.828563][ T41] sony 0003:054C:024B.0008: failed to claim input [ 221.845215][ T41] usb 5-1: USB disconnect, device number 3 [ 221.933023][ T3595] Bluetooth: hci4: command 0x0406 tx timeout [ 221.937524][ T3673] hid-picolcd 0003:04D8:C002.0009: unbalanced collection at end of report description [ 221.963201][ T1529] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 221.983360][ T3673] hid-picolcd 0003:04D8:C002.0009: device report parse failed [ 221.990903][ T3673] hid-picolcd: probe of 0003:04D8:C002.0009 failed with error -22 [ 222.055865][ T6526] loop2: detected capacity change from 0 to 256 [ 222.098417][ T26] audit: type=1800 audit(1717249789.146:48): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048780 res=0 errno=0 [ 222.140718][ T41] usb 1-1: USB disconnect, device number 6 [ 222.151424][ T26] audit: type=1804 audit(1717249789.166:49): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3452271100/syzkaller.6R0apd/17/file1/bus" dev="loop2" ino=1048780 res=1 errno=0 [ 222.218393][ T26] audit: type=1804 audit(1717249789.176:50): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3452271100/syzkaller.6R0apd/17/file1/bus" dev="loop2" ino=1048780 res=1 errno=0 [ 222.231841][ T6532] loop4: detected capacity change from 0 to 128 [ 222.278378][ T6532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.289720][ T6532] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/6/mnt supports timestamps until 2038 (0x7fffffff) [ 222.345715][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 222.429935][ T3623] usb 4-1: USB disconnect, device number 4 [ 224.252808][ T6565] loop2: detected capacity change from 0 to 256 [ 224.290344][ T26] audit: type=1800 audit(1717249791.336:51): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048781 res=0 errno=0 [ 224.371229][ T26] audit: type=1804 audit(1717249791.366:52): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3452271100/syzkaller.6R0apd/22/file1/bus" dev="loop2" ino=1048781 res=1 errno=0 [ 224.409177][ T6569] loop3: detected capacity change from 0 to 128 [ 224.448232][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.482741][ T26] audit: type=1804 audit(1717249791.366:53): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3452271100/syzkaller.6R0apd/22/file1/bus" dev="loop2" ino=1048781 res=1 errno=0 [ 224.512551][ T6569] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/62/mnt supports timestamps until 2038 (0x7fffffff) [ 224.513081][ T1529] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 224.629348][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 224.913258][ T1529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.940115][ T1529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.977571][ T1529] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 225.011288][ T1529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.033640][ T1529] usb 1-1: config 0 descriptor?? [ 225.204186][ T6557] loop4: detected capacity change from 0 to 40427 [ 225.222194][ T6557] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 225.232252][ T6557] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 225.272785][ T6557] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.380617][ T6557] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 225.393433][ T6557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.434726][ T26] audit: type=1804 audit(1717249792.486:54): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1474637775/syzkaller.u7LyOH/8/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 225.501856][ T26] audit: type=1804 audit(1717249792.516:55): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1474637775/syzkaller.u7LyOH/8/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 225.519923][ T1529] sony 0003:054C:024B.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 225.556386][ T1529] sony 0003:054C:024B.000A: failed to claim input [ 225.750072][ T3627] usb 1-1: USB disconnect, device number 7 [ 225.900850][ T6595] loop2: detected capacity change from 0 to 1024 [ 225.999091][ T6595] hfsplus: unable to load nls mapping "cpU61" [ 226.013196][ T6595] hfsplus: unable to parse mount options [ 226.022601][ T6211] syz-executor.4: attempt to access beyond end of device [ 226.022601][ T6211] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.340180][ T6604] loop2: detected capacity change from 0 to 256 [ 226.397007][ T26] audit: type=1800 audit(1717249793.446:56): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048782 res=0 errno=0 [ 227.859031][ T6643] loop3: detected capacity change from 0 to 128 [ 227.892357][ T6643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.913489][ T6643] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/68/mnt supports timestamps until 2038 (0x7fffffff) [ 228.007098][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 228.529373][ T6670] loop4: detected capacity change from 0 to 1024 [ 228.612988][ T41] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 228.692076][ T6670] hfsplus: unable to load nls mapping "cpU61" [ 228.700553][ T6670] hfsplus: unable to parse mount options [ 229.088640][ T6686] loop4: detected capacity change from 0 to 128 [ 229.142406][ T6686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.143440][ T41] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=a0.fc [ 229.167974][ T6686] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/15/mnt supports timestamps until 2038 (0x7fffffff) [ 229.214131][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.258741][ T41] usb 3-1: Product: syz [ 229.281072][ T41] usb 3-1: Manufacturer: syz [ 229.309958][ T41] usb 3-1: SerialNumber: syz [ 229.337113][ T41] usb 3-1: config 0 descriptor?? [ 229.377479][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 229.434317][ T41] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 229.641574][ T41] usb 3-1: USB disconnect, device number 5 [ 230.254986][ T6693] loop2: detected capacity change from 0 to 256 [ 230.723347][ T3953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 231.143169][ T3953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.163046][ T3953] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.172304][ T3953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.214976][ T3953] usb 5-1: config 0 descriptor?? [ 231.282038][ T6711] loop3: detected capacity change from 0 to 1024 [ 231.473123][ T6711] hfsplus: unable to load nls mapping "cpU61" [ 231.479545][ T6711] hfsplus: unable to parse mount options [ 231.706875][ T6721] loop3: detected capacity change from 0 to 128 [ 231.729437][ T3953] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 231.745333][ T6721] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.745572][ T3953] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input8 [ 231.770670][ T6721] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/75/mnt supports timestamps until 2038 (0x7fffffff) [ 231.883162][ T3953] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 231.936666][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 232.505138][ T3623] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.527523][ T3673] usb 5-1: USB disconnect, device number 4 [ 232.543174][ C0] keytouch 0003:0926:3333.000B: usb_submit_urb(ctrl) failed: -19 [ 232.701625][ T6727] loop3: detected capacity change from 0 to 40427 [ 232.712503][ T6727] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 232.730010][ T6727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 232.749007][ T6727] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.820345][ T6727] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 232.834414][ T6727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 232.872216][ T26] audit: type=1804 audit(1717249799.924:57): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1277921161/syzkaller.uuGAxu/76/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 232.874247][ T3623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.918698][ T3623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.935352][ T26] audit: type=1804 audit(1717249799.974:58): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1277921161/syzkaller.uuGAxu/76/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 232.937236][ T3623] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 232.999895][ T3623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.021737][ T3623] usb 1-1: config 0 descriptor?? [ 233.371861][ T5991] syz-executor.3: attempt to access beyond end of device [ 233.371861][ T5991] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.491480][ T3623] sony 0003:054C:024B.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 233.515877][ T6747] loop4: detected capacity change from 0 to 1024 [ 233.536253][ T3623] sony 0003:054C:024B.000C: failed to claim input [ 233.646767][ T6747] hfsplus: unable to load nls mapping "cpU61" [ 233.680937][ T6747] hfsplus: unable to parse mount options [ 233.697239][ T3623] usb 1-1: USB disconnect, device number 8 [ 234.006490][ T6753] loop3: detected capacity change from 0 to 512 [ 234.027929][ T6753] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 234.101722][ T6753] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.149583][ T6758] loop4: detected capacity change from 0 to 128 [ 234.179196][ T6753] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 234.238006][ T6753] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 234.254305][ T6758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.293345][ T6758] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/24/mnt supports timestamps until 2038 (0x7fffffff) [ 234.319748][ T6753] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 1 [ 234.389252][ T6753] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 234.462367][ T6753] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 234.474192][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 234.492037][ T6753] EXT4-fs (loop3): 1 truncate cleaned up [ 234.507835][ T6753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.530559][ T6753] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz-executor.3: bad symlink. [ 234.559195][ T6764] loop4: detected capacity change from 0 to 1024 [ 234.581376][ T6767] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz-executor.3: bad symlink. [ 234.587265][ T6764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.832611][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 234.868019][ T6764] EXT4-fs (loop4): unmounting filesystem. [ 235.329500][ T6786] loop4: detected capacity change from 0 to 1024 [ 235.474672][ T6786] hfsplus: unable to load nls mapping "cpU61" [ 235.484491][ T6786] hfsplus: unable to parse mount options [ 235.625155][ T6798] loop4: detected capacity change from 0 to 256 [ 235.700337][ T26] audit: type=1800 audit(1717249802.754:59): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048783 res=0 errno=0 [ 235.817446][ T6805] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.003329][ T6815] loop4: detected capacity change from 0 to 128 [ 236.025755][ T6815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 236.102343][ T6815] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/30/mnt supports timestamps until 2038 (0x7fffffff) [ 236.328089][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 236.605942][ T6833] loop3: detected capacity change from 0 to 256 [ 236.638738][ T26] audit: type=1800 audit(1717249803.694:60): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048784 res=0 errno=0 [ 236.912341][ T6844] loop3: detected capacity change from 0 to 512 [ 236.914798][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.981517][ T6844] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 237.008123][ T6852] loop4: detected capacity change from 0 to 1024 [ 237.030511][ T6852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.035541][ T6844] EXT4-fs (loop3): mount failed [ 237.051677][ T6852] EXT4-fs (loop4): unmounting filesystem. [ 237.100673][ T6855] loop2: detected capacity change from 0 to 128 [ 237.141066][ T6855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.160161][ T6855] ext4 filesystem being mounted at /root/syzkaller-testdir3452271100/syzkaller.6R0apd/33/mnt supports timestamps until 2038 (0x7fffffff) [ 237.210749][ T6180] EXT4-fs (loop2): unmounting filesystem. [ 237.320598][ T6864] loop3: detected capacity change from 0 to 256 [ 237.356313][ T26] audit: type=1800 audit(1717249804.414:61): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048785 res=0 errno=0 [ 237.500165][ T6869] loop4: detected capacity change from 0 to 512 [ 237.598297][ T6869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.613129][ T6869] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/37/bus supports timestamps until 2038 (0x7fffffff) [ 237.628848][ T6867] loop2: detected capacity change from 0 to 1024 [ 237.781464][ T6867] hfsplus: unable to load nls mapping "cpU61" [ 237.792319][ T6867] hfsplus: unable to parse mount options [ 237.859432][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 238.048774][ T6890] loop2: detected capacity change from 0 to 256 [ 238.190017][ T6900] loop3: detected capacity change from 0 to 128 [ 238.209202][ T6900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.227779][ T6900] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/97/mnt supports timestamps until 2038 (0x7fffffff) [ 238.230341][ T26] audit: type=1804 audit(1717249805.284:62): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2233287084/syzkaller.OFQIeG/189/bus" dev="sda1" ino=1966 res=1 errno=0 [ 238.294662][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 238.644425][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.957759][ T6924] loop3: detected capacity change from 0 to 1024 [ 239.139590][ T6924] hfsplus: unable to load nls mapping "cpU61" [ 239.164413][ T6924] hfsplus: unable to parse mount options [ 239.549904][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.954248][ T6955] device gretap0 entered promiscuous mode [ 239.974881][ T6955] device gretap0 left promiscuous mode [ 240.194284][ T6957] loop3: detected capacity change from 0 to 128 [ 240.223886][ T6957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.239609][ T6957] ext4 filesystem being mounted at /root/syzkaller-testdir1277921161/syzkaller.uuGAxu/106/mnt supports timestamps until 2038 (0x7fffffff) [ 240.386041][ T5991] EXT4-fs (loop3): unmounting filesystem. [ 240.691762][ T6969] loop3: detected capacity change from 0 to 4096 [ 240.786445][ T6976] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.867572][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.152144][ T6984] loop3: detected capacity change from 0 to 764 [ 241.409551][ T6990] loop4: detected capacity change from 0 to 128 [ 241.460049][ T6990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.508439][ T6990] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/52/mnt supports timestamps until 2038 (0x7fffffff) [ 241.649728][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 241.744541][ T6993] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 242.102047][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.235080][ T7005] loop1: detected capacity change from 0 to 512 [ 242.411949][ T7005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.422467][ T7005] ext4 filesystem being mounted at /root/syzkaller-testdir183422147/syzkaller.siPRA8/31/file0 supports timestamps until 2038 (0x7fffffff) [ 242.983673][ T6044] EXT4-fs (loop1): unmounting filesystem. [ 243.030095][ T7014] tipc: Started in network mode [ 243.054695][ T7014] tipc: Node identity ac14142a, cluster identity 4711 [ 243.075141][ T7014] tipc: Enabled bearer , priority 10 [ 243.292013][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.572601][ T7045] mmap: syz-executor.4 (7045) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.669164][ T26] audit: type=1326 audit(1717249810.724:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55a8e7cee9 code=0x0 [ 243.770303][ T7059] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.195892][ T3673] tipc: Node number set to 2886997034 [ 244.398228][ T7084] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.436042][ T7086] ext4: Unknown parameter 'defcontext' [ 244.548016][ T7093] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 244.550139][ T7091] loop4: detected capacity change from 0 to 256 [ 244.853223][ T7094] loop2: detected capacity change from 0 to 128 [ 245.204683][ T7094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 245.240719][ T7094] ext4 filesystem being mounted at /root/syzkaller-testdir3452271100/syzkaller.6R0apd/37/mnt supports timestamps until 2038 (0x7fffffff) [ 245.322556][ T7091] exFAT-fs (loop4): error, found bogus dentry(2) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 245.366919][ T7105] loop3: detected capacity change from 0 to 256 [ 245.367284][ T7091] exFAT-fs (loop4): Filesystem has been set read-only [ 245.390644][ T6180] EXT4-fs (loop2): unmounting filesystem. [ 245.608281][ T7115] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 245.642751][ T7115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 245.738989][ T7122] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.393464][ T7150] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.693598][ T7160] loop4: detected capacity change from 0 to 2048 [ 246.780726][ T7164] kvm: emulating exchange as write [ 246.818002][ T7160] loop4: p1 < > p4 [ 246.827242][ T7160] loop4: p4 size 8388608 extends beyond EOD, truncated [ 247.645048][ T7205] syz-executor.2[7205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.645148][ T7205] syz-executor.2[7205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.357786][ T7227] device syzkaller0 entered promiscuous mode [ 248.681612][ T7236] loop4: detected capacity change from 0 to 512 [ 248.894951][ T7236] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.904918][ T7236] ext4 filesystem being mounted at /root/syzkaller-testdir1474637775/syzkaller.u7LyOH/68/file0 supports timestamps until 2038 (0x7fffffff) [ 249.464603][ T6211] EXT4-fs (loop4): unmounting filesystem. [ 249.513193][ T26] audit: type=1800 audit(1717249816.574:64): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1940 res=0 errno=0 [ 249.648847][ T7251] syz-executor.0[7251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.648940][ T7251] syz-executor.0[7251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.700903][ T7254] syz-executor.0[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.721071][ T7254] syz-executor.0[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.869361][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.903077][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.263027][ T41] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 250.514584][ T7272] device pim6reg1 entered promiscuous mode [ 250.543030][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 250.648228][ T7276] loop1: detected capacity change from 0 to 256 [ 250.665102][ T26] audit: type=1800 audit(1717249817.724:65): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048789 res=0 errno=0 [ 250.691834][ T41] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 250.705643][ T41] usb 3-1: config 1 has no interface number 1 [ 250.718677][ T41] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.824619][ T7274] device pim6reg1 entered promiscuous mode [ 250.898563][ T41] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.903281][ T7283] loop3: detected capacity change from 0 to 4096 [ 250.911317][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.928949][ T41] usb 3-1: Product: syz [ 250.933484][ T41] usb 3-1: Manufacturer: syz [ 250.938383][ T41] usb 3-1: SerialNumber: syz [ 250.959821][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.960723][ T7289] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.969305][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.049560][ T7291] syz-executor.1[7291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.049656][ T7291] syz-executor.1[7291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.255851][ T26] audit: type=1800 audit(1717249818.314:66): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 251.303288][ T41] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 251.349127][ T41] usb 3-1: USB disconnect, device number 6 [ 251.714677][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.734356][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.915093][ T7317] loop4: detected capacity change from 0 to 4096 [ 252.000329][ T7323] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.334938][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.368737][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.941822][ T7354] loop4: detected capacity change from 0 to 4096 [ 253.045814][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.056274][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.139865][ T7374] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.648486][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.684866][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.956132][ T7404] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 253.981468][ T7404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.989501][ T7404] IPv6: NLM_F_CREATE should be set when creating new route [ 253.996884][ T7404] IPv6: NLM_F_CREATE should be set when creating new route [ 254.700648][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.708046][ T7400] loop4: detected capacity change from 0 to 32768 [ 254.710649][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.752279][ T7400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7400) [ 254.804713][ T7400] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.835325][ T7427] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.849657][ T7400] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 254.878439][ T7400] BTRFS info (device loop4): setting nodatacow, compression disabled [ 254.882226][ T7427] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 254.912945][ T7400] BTRFS info (device loop4): turning on sync discard [ 254.941819][ T7400] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 255.004965][ T7400] BTRFS info (device loop4): trying to use backup root at mount time [ 255.041333][ T7400] BTRFS info (device loop4): using free space tree [ 255.460024][ T6211] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.694713][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.701049][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.803070][ T7421] loop3: detected capacity change from 0 to 32768 [ 255.837616][ T7421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7421) [ 255.931975][ T7421] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.981680][ T7421] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 256.045070][ T7421] BTRFS info (device loop3): turning off barriers [ 256.103131][ T7421] BTRFS info (device loop3): setting nodatasum [ 256.139922][ T7421] BTRFS info (device loop3): enabling ssd optimizations [ 256.177512][ T7421] BTRFS info (device loop3): using spread ssd allocation scheme [ 256.219827][ T7421] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.233160][ T7421] BTRFS info (device loop3): force lzo compression, level 0 [ 256.242748][ T7421] BTRFS info (device loop3): using free space tree [ 256.359704][ T7421] BTRFS info (device loop3): checking UUID tree [ 256.379651][ T7421] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.402963][ T4249] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.560030][ T7508] loop3: detected capacity change from 0 to 8192 [ 257.572035][ T7512] ------------[ cut here ]------------ [ 257.577812][ T7512] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 257.585652][ T7508] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.632041][ T7512] WARNING: CPU: 0 PID: 7512 at net/mac80211/main.c:287 ieee80211_link_info_change_notify+0x1b2/0x220 [ 257.643176][ T7512] Modules linked in: [ 257.647103][ T7512] CPU: 0 PID: 7512 Comm: syz-executor.1 Not tainted 6.1.92-syzkaller #0 [ 257.655665][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 257.665830][ T7512] RIP: 0010:ieee80211_link_info_change_notify+0x1b2/0x220 [ 257.673051][ T7512] Code: d4 2f e0 f7 49 8b 86 20 09 00 00 49 81 c6 40 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 9e fc 8b 4c 89 f6 89 ea e8 2e af 50 f7 <0f> 0b e9 3a ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 257.692793][ T7512] RSP: 0018:ffffc90004d0f3c8 EFLAGS: 00010246 [ 257.693052][ T4249] usb 5-1: Using ep0 maxpacket: 16 [ 257.698923][ T7512] RAX: 30435e1d8a9a0600 RBX: 0000000002000000 RCX: 0000000000040000 [ 257.712108][ T7512] RDX: ffffc9000fa08000 RSI: 0000000000004811 RDI: 0000000000004812 [ 257.720159][ T7512] RBP: 0000000000000000 R08: ffffffff81528ede R09: fffff520009a1dd9 [ 257.728207][ T7512] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888056cb0e80 [ 257.736260][ T7512] R13: dffffc0000000000 R14: ffff888051350000 R15: ffff888051352260 [ 257.744307][ T7512] FS: 00007fefd892f6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 257.753313][ T7512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.759928][ T7512] CR2: 0000555555d30788 CR3: 000000005f95c000 CR4: 00000000003506f0 [ 257.767983][ T7512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.776032][ T7512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.784087][ T7512] Call Trace: [ 257.787392][ T7512] [ 257.790344][ T7512] ? __warn+0x15a/0x520 [ 257.794583][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 257.801125][ T7512] ? report_bug+0x2af/0x500 [ 257.805796][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 257.812345][ T7512] ? handle_bug+0x3d/0x70 [ 257.816776][ T7512] ? exc_invalid_op+0x16/0x40 [ 257.821498][ T7512] ? asm_exc_invalid_op+0x16/0x20 [ 257.826629][ T7512] ? __warn_printk+0x28e/0x350 [ 257.831431][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 257.838025][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 257.843285][ T4249] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 257.844594][ T7512] ieee80211_set_mcast_rate+0x42/0x50 [ 257.855650][ T7508] Bluetooth: MGMT ver 1.22 [ 257.858899][ T7512] ? ieee80211_leave_ibss+0x20/0x20 [ 257.858937][ T7512] nl80211_set_mcast_rate+0xaf0/0xec0 [ 257.858968][ T7512] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 257.880210][ T7512] genl_rcv_msg+0xc1a/0xf70 [ 257.884825][ T7512] ? genl_bind+0x400/0x400 [ 257.886067][ T7508] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 257.889271][ T7512] ? read_lock_is_recursive+0x10/0x10 [ 257.889320][ T7512] ? ref_tracker_free+0x638/0x7d0 [ 257.896527][ T4249] usb 5-1: config 1 has no interface number 1 [ 257.901570][ T7512] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 257.901604][ T7512] ? refcount_inc+0x80/0x80 [ 257.901626][ T7512] ? __copy_skb_header+0x47b/0x600 [ 257.928327][ T7512] netlink_rcv_skb+0x1cd/0x410 [ 257.933181][ T7512] ? genl_bind+0x400/0x400 [ 257.937637][ T7512] ? netlink_ack+0x1290/0x1290 [ 257.941078][ T4249] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.942437][ T7512] genl_rcv+0x24/0x40 [ 257.942464][ T7512] netlink_unicast+0x7d8/0x970 [ 257.962130][ T7512] ? netlink_detachskb+0x90/0x90 [ 257.967156][ T7512] ? __virt_addr_valid+0x44a/0x520 [ 257.972307][ T7512] ? __phys_addr_symbol+0x2b/0x70 [ 257.977425][ T7512] ? __check_object_size+0x4dd/0xa30 [ 257.982755][ T7512] ? bpf_lsm_netlink_send+0x5/0x10 [ 257.987962][ T7512] netlink_sendmsg+0xa26/0xd60 [ 257.992775][ T7512] ? netlink_getsockopt+0x580/0x580 [ 257.998061][ T7512] ? aa_sock_msg_perm+0x91/0x150 [ 258.003100][ T7512] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.008431][ T7512] ? security_socket_sendmsg+0x7d/0xa0 [ 258.013986][ T7512] ? netlink_getsockopt+0x580/0x580 [ 258.019230][ T7512] ____sys_sendmsg+0x5a5/0x8f0 [ 258.024097][ T7512] ? __sys_sendmsg_sock+0x30/0x30 [ 258.029178][ T7512] __sys_sendmsg+0x2a9/0x390 [ 258.034036][ T7512] ? ____sys_sendmsg+0x8f0/0x8f0 [ 258.039026][ T7512] ? rcu_is_watching+0x11/0xb0 [ 258.043897][ T7512] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 258.049952][ T7512] ? syscall_enter_from_user_mode+0x2e/0x230 [ 258.056021][ T7512] ? lockdep_hardirqs_on+0x94/0x130 [ 258.061261][ T7512] ? syscall_enter_from_user_mode+0x2e/0x230 [ 258.067342][ T7512] do_syscall_64+0x3b/0xb0 [ 258.071798][ T7512] ? clear_bhb_loop+0x45/0xa0 [ 258.076582][ T7512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.082526][ T7512] RIP: 0033:0x7fefd7c7cee9 [ 258.087089][ T7512] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 258.106791][ T7512] RSP: 002b:00007fefd892f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.115292][ T7512] RAX: ffffffffffffffda RBX: 00007fefd7db3fa0 RCX: 00007fefd7c7cee9 [ 258.123343][ T7512] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 258.131342][ T7512] RBP: 00007fefd7cc947f R08: 0000000000000000 R09: 0000000000000000 [ 258.139391][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.147522][ T7512] R13: 000000000000000b R14: 00007fefd7db3fa0 R15: 00007ffe23a0ace8 [ 258.155602][ T7512] [ 258.158729][ T7512] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.166025][ T7512] CPU: 0 PID: 7512 Comm: syz-executor.1 Not tainted 6.1.92-syzkaller #0 [ 258.174367][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 258.184540][ T7512] Call Trace: [ 258.187833][ T7512] [ 258.190776][ T7512] dump_stack_lvl+0x1e3/0x2cb [ 258.195485][ T7512] ? nf_tcp_handle_invalid+0x642/0x642 [ 258.200979][ T7512] ? panic+0x764/0x764 [ 258.205073][ T7512] ? 0xffffffffa000094c [ 258.209250][ T7512] ? vscnprintf+0x59/0x80 [ 258.213616][ T7512] panic+0x318/0x764 [ 258.217536][ T7512] ? __warn+0x169/0x520 [ 258.218090][ T4249] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.218113][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.218130][ T4249] usb 5-1: Product: syz [ 258.218142][ T4249] usb 5-1: Manufacturer: syz [ 258.218154][ T4249] usb 5-1: SerialNumber: syz [ 258.251996][ T7512] ? memcpy_page_flushcache+0xfc/0xfc [ 258.257407][ T7512] __warn+0x348/0x520 [ 258.261418][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 258.267949][ T7512] report_bug+0x2af/0x500 [ 258.272298][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 258.278918][ T7512] handle_bug+0x3d/0x70 [ 258.283113][ T7512] exc_invalid_op+0x16/0x40 [ 258.287646][ T7512] asm_exc_invalid_op+0x16/0x20 [ 258.292520][ T7512] RIP: 0010:ieee80211_link_info_change_notify+0x1b2/0x220 [ 258.299659][ T7512] Code: d4 2f e0 f7 49 8b 86 20 09 00 00 49 81 c6 40 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 9e fc 8b 4c 89 f6 89 ea e8 2e af 50 f7 <0f> 0b e9 3a ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 258.319285][ T7512] RSP: 0018:ffffc90004d0f3c8 EFLAGS: 00010246 [ 258.325375][ T7512] RAX: 30435e1d8a9a0600 RBX: 0000000002000000 RCX: 0000000000040000 [ 258.333367][ T7512] RDX: ffffc9000fa08000 RSI: 0000000000004811 RDI: 0000000000004812 [ 258.341358][ T7512] RBP: 0000000000000000 R08: ffffffff81528ede R09: fffff520009a1dd9 [ 258.349349][ T7512] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888056cb0e80 [ 258.357340][ T7512] R13: dffffc0000000000 R14: ffff888051350000 R15: ffff888051352260 [ 258.365342][ T7512] ? __warn_printk+0x28e/0x350 [ 258.370146][ T7512] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 258.376676][ T7512] ieee80211_set_mcast_rate+0x42/0x50 [ 258.382083][ T7512] ? ieee80211_leave_ibss+0x20/0x20 [ 258.387314][ T7512] nl80211_set_mcast_rate+0xaf0/0xec0 [ 258.392721][ T7512] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 258.398573][ T7512] genl_rcv_msg+0xc1a/0xf70 [ 258.403109][ T7512] ? genl_bind+0x400/0x400 [ 258.407561][ T7512] ? read_lock_is_recursive+0x10/0x10 [ 258.412965][ T7512] ? ref_tracker_free+0x638/0x7d0 [ 258.418005][ T7512] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 258.423832][ T7512] ? refcount_inc+0x80/0x80 [ 258.428345][ T7512] ? __copy_skb_header+0x47b/0x600 [ 258.433480][ T7512] netlink_rcv_skb+0x1cd/0x410 [ 258.438275][ T7512] ? genl_bind+0x400/0x400 [ 258.442708][ T7512] ? netlink_ack+0x1290/0x1290 [ 258.447518][ T7512] genl_rcv+0x24/0x40 [ 258.451514][ T7512] netlink_unicast+0x7d8/0x970 [ 258.456311][ T7512] ? netlink_detachskb+0x90/0x90 [ 258.461269][ T7512] ? __virt_addr_valid+0x44a/0x520 [ 258.466404][ T7512] ? __phys_addr_symbol+0x2b/0x70 [ 258.471452][ T7512] ? __check_object_size+0x4dd/0xa30 [ 258.476767][ T7512] ? bpf_lsm_netlink_send+0x5/0x10 [ 258.481917][ T7512] netlink_sendmsg+0xa26/0xd60 [ 258.486721][ T7512] ? netlink_getsockopt+0x580/0x580 [ 258.491954][ T7512] ? aa_sock_msg_perm+0x91/0x150 [ 258.496923][ T7512] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 258.502233][ T7512] ? security_socket_sendmsg+0x7d/0xa0 [ 258.507721][ T7512] ? netlink_getsockopt+0x580/0x580 [ 258.512959][ T7512] ____sys_sendmsg+0x5a5/0x8f0 [ 258.517757][ T7512] ? __sys_sendmsg_sock+0x30/0x30 [ 258.522817][ T7512] __sys_sendmsg+0x2a9/0x390 [ 258.527432][ T7512] ? ____sys_sendmsg+0x8f0/0x8f0 [ 258.532406][ T7512] ? rcu_is_watching+0x11/0xb0 [ 258.537201][ T7512] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 258.543198][ T7512] ? syscall_enter_from_user_mode+0x2e/0x230 [ 258.549171][ T7512] ? lockdep_hardirqs_on+0x94/0x130 [ 258.554360][ T7512] ? syscall_enter_from_user_mode+0x2e/0x230 [ 258.560329][ T7512] do_syscall_64+0x3b/0xb0 [ 258.564746][ T7512] ? clear_bhb_loop+0x45/0xa0 [ 258.569420][ T7512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.575309][ T7512] RIP: 0033:0x7fefd7c7cee9 [ 258.579711][ T7512] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 258.599315][ T7512] RSP: 002b:00007fefd892f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.607727][ T7512] RAX: ffffffffffffffda RBX: 00007fefd7db3fa0 RCX: 00007fefd7c7cee9 [ 258.615688][ T7512] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 258.623650][ T7512] RBP: 00007fefd7cc947f R08: 0000000000000000 R09: 0000000000000000 [ 258.631614][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.639575][ T7512] R13: 000000000000000b R14: 00007fefd7db3fa0 R15: 00007ffe23a0ace8 [ 258.647568][ T7512] [ 258.650726][ T7512] Kernel Offset: disabled [ 258.655135][ T7512] Rebooting in 86400 seconds..