last executing test programs: 5.326997634s ago: executing program 0 (id=346): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.143642892s ago: executing program 0 (id=355): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18, &(0x7f00000000c0)={[{@block_validity}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 2.731420812s ago: executing program 0 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 2.34804162s ago: executing program 0 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.168066173s ago: executing program 0 (id=367): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002910140820528d7a7a0000000010902"], 0x0) 1.279816777s ago: executing program 4 (id=386): sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x250, 0x250, 0xffffffff, 0x250, 0x250, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1.130897757s ago: executing program 4 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x82060, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) 995.843847ms ago: executing program 4 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x4000}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 988.546678ms ago: executing program 3 (id=394): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x23, 0x9, 0x4, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0xfffeffff, 0x3, 0x4, 0x5}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 861.763727ms ago: executing program 2 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b04000000000000000002000000200004801c0001800900010068617368000000000c001f0008000740000000010900010073797a30000000000900020073797a3200000000050007"], 0x7c}}, 0x0) 846.718958ms ago: executing program 1 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x3c}}, 0x0) 755.892175ms ago: executing program 3 (id=399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x84}}, 0x0) 755.698285ms ago: executing program 4 (id=400): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0x1000848, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64], 0x5, 0x38d, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523) 734.803196ms ago: executing program 2 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f61640034000280080004400000f7ff070005400000000008000340000000000800024000000000080006400000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 721.308197ms ago: executing program 1 (id=402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 639.969723ms ago: executing program 3 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x4c}}, 0x0) 605.392436ms ago: executing program 1 (id=404): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b40)=""/4114, 0x1012}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x2}}], 0x1, 0x0, 0x0) 583.072517ms ago: executing program 2 (id=405): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/202, 0xff4) 530.110712ms ago: executing program 0 (id=406): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f0000000280)={[{@noload}, {@mblk_io_submit}, {@lazytime}, {@nogrpid}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 529.944451ms ago: executing program 3 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "02"}]}], {0x14}}, 0x94}}, 0x0) 392.044791ms ago: executing program 2 (id=408): syz_mount_image$minix(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES32, @ANYRESOCT=0x0, @ANYRES16, @ANYRES8=0x0], 0x1, 0x1e5, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) 391.931081ms ago: executing program 1 (id=409): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}) 391.607991ms ago: executing program 3 (id=410): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$FIBMAP(r0, 0x1, 0x0) 291.352148ms ago: executing program 4 (id=411): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x0, 0x300050) 280.439229ms ago: executing program 1 (id=412): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2040cc, &(0x7f0000002080)={[{@fat=@codepage={'codepage', 0x3d, '1255'}}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@dots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x400}}, {@nodots}]}, 0xfd, 0x1c6, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) 220.034174ms ago: executing program 2 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 185.304176ms ago: executing program 3 (id=414): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0x0) 77.821734ms ago: executing program 2 (id=415): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffc) 77.552214ms ago: executing program 4 (id=416): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x65, 0x38, 0x67]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) llistxattr(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 0s ago: executing program 1 (id=417): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b21, &(0x7f0000000040)) kernel console output (not intermixed with test programs): write_dquot: Error -117 occurred while creating quota [ 144.949301][ T4391] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.89: Failed to acquire dquot type 0 [ 145.202386][ T3830] usb 4-1: Using ep0 maxpacket: 32 [ 145.242245][ T11] device veth1_vlan left promiscuous mode [ 145.258447][ T11] device veth0_vlan left promiscuous mode [ 145.313285][ T3808] EXT4-fs (loop2): unmounting filesystem. [ 145.322543][ T3830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.350726][ T3830] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.591902][ T3830] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.625816][ T3830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.661721][ T3830] usb 4-1: Product: syz [ 145.691687][ T3830] usb 4-1: Manufacturer: syz [ 145.696479][ T3830] usb 4-1: SerialNumber: syz [ 147.508944][ T3830] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.697273][ T4410] loop0: detected capacity change from 0 to 128 [ 148.291851][ T4410] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 148.355971][ T4409] syz.0.92: attempt to access beyond end of device [ 148.355971][ T4409] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 148.369484][ T4409] syz.0.92: attempt to access beyond end of device [ 148.369484][ T4409] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 148.390856][ T4410] FAT-fs (loop0): FAT read failed (blocknr 128) [ 148.425571][ T3830] usb 4-1: USB disconnect, device number 3 [ 148.448562][ T3830] usblp0: removed [ 148.758618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 148.823411][ T11] team0 (unregistering): Port device team_slave_0 removed [ 148.886889][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.943347][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.090338][ T4425] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 150.098302][ T4425] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 150.106803][ T4425] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 150.114706][ T4425] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 150.945666][ T26] audit: type=1326 audit(1725086374.196:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4426 comm="syz.3.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0779eb9 code=0x0 [ 151.240427][ T11] bond0 (unregistering): Released all slaves [ 151.624441][ T4432] loop3: detected capacity change from 0 to 2048 [ 151.645501][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.658369][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.668675][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.679417][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.689294][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.703686][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.714470][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.733890][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.753208][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.774282][ T4122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.859795][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.870786][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.879399][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.888280][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.017464][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.103737][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.329762][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.621301][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.640008][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.665104][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.674777][ T4440] loop2: detected capacity change from 0 to 512 [ 152.678936][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.700536][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.712299][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.732848][ T4440] EXT4-fs (loop2): Test dummy encryption mode enabled [ 152.742777][ T4122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.758892][ T4440] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.100: inline data xattr refers to an external xattr inode [ 152.798637][ T4122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.807828][ T4122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.816718][ T4122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.826644][ T4122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.853330][ T4440] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.100: couldn't read orphan inode 12 (err -117) [ 152.873596][ T4440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.909665][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.930684][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 152.939151][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.127323][ T3920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.177587][ T3920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.231504][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 153.274654][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.288985][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.306708][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.339813][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.368827][ T26] audit: type=1326 audit(1725086376.616:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4439 comm="syz.2.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112c579eb9 code=0x0 [ 153.369687][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.456961][ T4440] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 153.496135][ T4440] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.100: Directory hole found for htree leaf block 0 [ 153.507629][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.553991][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.574244][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.584468][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.591318][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.612318][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.620858][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.628846][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.679441][ T4463] loop3: detected capacity change from 0 to 8 [ 153.727598][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.736452][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.756394][ T4219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.773127][ T4463] SQUASHFS error: lzo decompression failed, data probably corrupt [ 153.812048][ T4463] SQUASHFS error: Failed to read block 0x91: -5 [ 153.816349][ T3808] EXT4-fs (loop2): unmounting filesystem. [ 153.818314][ T4463] SQUASHFS error: Unable to read metadata cache entry [8f] [ 153.898041][ T4463] SQUASHFS error: Unable to read inode 0x11f [ 154.120661][ T4474] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 154.277400][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.460540][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.663504][ T3639] Bluetooth: hci1: command tx timeout [ 157.240454][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.741948][ T3639] Bluetooth: hci1: command tx timeout [ 157.760304][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.974247][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.997413][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.032318][ T4459] chnl_net:caif_netlink_parms(): no params data found [ 158.147214][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.158500][ T4504] loop3: detected capacity change from 0 to 256 [ 158.172414][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.319292][ T4504] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 158.435435][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.445261][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.646018][ T4511] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.653927][ T4511] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 158.662400][ T4511] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.670222][ T4511] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 160.543667][ T4219] device veth0_vlan entered promiscuous mode [ 160.563102][ T3639] Bluetooth: hci1: command tx timeout [ 160.583654][ T4513] syz.3.107: attempt to access beyond end of device [ 160.583654][ T4513] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 160.599293][ T4513] syz.3.107: attempt to access beyond end of device [ 160.599293][ T4513] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 160.615428][ T4513] syz.3.107: attempt to access beyond end of device [ 160.615428][ T4513] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 160.629087][ T26] audit: type=1800 audit(1725086383.876:70): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.107" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 160.759482][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.768978][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.779350][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.788832][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.797244][ T26] audit: type=1800 audit(1725086383.876:71): pid=4512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 160.820328][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.846956][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.873562][ T4459] device bridge_slave_0 entered promiscuous mode [ 160.894078][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.901455][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.926321][ T4459] device bridge_slave_1 entered promiscuous mode [ 161.392614][ T4519] hub 9-0:1.0: USB hub found [ 161.398698][ T4519] hub 9-0:1.0: 8 ports detected [ 161.495092][ T4219] device veth1_vlan entered promiscuous mode [ 161.606838][ T4524] loop1: detected capacity change from 0 to 512 [ 162.084774][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.107414][ T4524] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.109: corrupted inode contents [ 162.133896][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.144237][ T4524] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #3: comm syz.1.109: mark_inode_dirty error [ 162.190280][ T4459] team0: Port device team_slave_0 added [ 162.211124][ T4459] team0: Port device team_slave_1 added [ 162.279781][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.293387][ T4524] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.109: corrupted inode contents [ 162.295468][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.333968][ T4459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.343168][ T4524] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.109: mark_inode_dirty error [ 162.347854][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.364317][ T4524] Quota error (device loop1): write_blk: dquota write failed [ 162.369771][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.447363][ T4524] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 162.631510][ T3639] Bluetooth: hci1: command tx timeout [ 163.061865][ T4524] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.109: Failed to acquire dquot type 0 [ 163.082791][ T4459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.124197][ T4524] EXT4-fs (loop1): 1 orphan inode deleted [ 163.162447][ T4524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.203130][ T102] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.226111][ T4524] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 163.260485][ T102] EXT4-fs error (device loop1): ext4_release_dquot:6823: comm kworker/u4:4: Failed to release dquot type 1 [ 163.392313][ T4219] device veth0_macvtap entered promiscuous mode [ 163.450523][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.465302][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.497327][ T4539] loop2: detected capacity change from 0 to 512 [ 163.707099][ T4539] ext4: Bad value for 'auto_da_alloc' [ 164.188477][ T4459] device hsr_slave_0 entered promiscuous mode [ 164.220673][ T4459] device hsr_slave_1 entered promiscuous mode [ 164.258177][ T4459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.392628][ T4459] Cannot create hsr debugfs directory [ 165.060622][ T4219] device veth1_macvtap entered promiscuous mode [ 165.752823][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.803053][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.845640][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.887309][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.988250][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.999621][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.048090][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.060025][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.078807][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.090866][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.115330][ T4219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.243206][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.251508][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.260353][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.269264][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.280905][ T4543] device wg2 entered promiscuous mode [ 166.503744][ T4122] EXT4-fs (loop1): unmounting filesystem. [ 166.945139][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.975344][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.038918][ T4561] loop1: detected capacity change from 0 to 512 [ 167.047573][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.081644][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.100176][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.112355][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.123398][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.134309][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.139071][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.161724][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.179133][ T4561] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 167.181590][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.330331][ T4219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.393973][ T4219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.410480][ T4219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.420179][ T4219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.430233][ T4219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.443320][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.712066][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 167.851966][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.028604][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.049576][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.114230][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.131522][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.232047][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.242876][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.253319][ T7] usb 4-1: Product: syz [ 168.257528][ T7] usb 4-1: Manufacturer: syz [ 168.262331][ T7] usb 4-1: SerialNumber: syz [ 168.322856][ T7] cdc_ncm 4-1:1.0: skipping garbage [ 168.328127][ T7] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 168.339627][ T7] cdc_ncm 4-1:1.0: bind() failure [ 168.462722][ T4122] EXT4-fs (loop1): unmounting filesystem. [ 168.712031][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.734831][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.747681][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.875005][ T26] audit: type=1326 audit(1725086392.126:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4583 comm="syz.1.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff638b79eb9 code=0x0 [ 169.102750][ T3648] Bluetooth: hci1: command tx timeout [ 169.459114][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.509964][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.587543][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.660032][ T3827] usb 4-1: USB disconnect, device number 4 [ 170.781360][ T4601] loop4: detected capacity change from 0 to 2048 [ 170.790148][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.810102][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.825204][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.839961][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.853401][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.861423][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.880153][ T4609] netlink: 'syz.3.122': attribute type 11 has an invalid length. [ 170.909000][ T4601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.930798][ T4606] device bridge_slave_1 left promiscuous mode [ 170.976463][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.001102][ T4601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.018671][ T4601] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 171.031675][ T4601] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.031675][ T4601] [ 171.041372][ T4601] EXT4-fs (loop4): Total free blocks count 0 [ 171.049657][ T4601] EXT4-fs (loop4): Free/Dirty block details [ 171.069810][ T4601] EXT4-fs (loop4): free_blocks=2415919104 [ 171.080814][ T4601] EXT4-fs (loop4): dirty_blocks=32 [ 171.086540][ T4601] EXT4-fs (loop4): Block reservation details [ 171.093124][ T4601] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 171.225294][ T3968] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 172.170518][ T11] device hsr_slave_0 left promiscuous mode [ 172.195106][ T11] device hsr_slave_1 left promiscuous mode [ 172.206737][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.215098][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.233940][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.244463][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.270247][ T11] device bridge_slave_1 left promiscuous mode [ 172.276868][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.285831][ T11] device bridge_slave_0 left promiscuous mode [ 172.298536][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.310364][ T4631] loop3: detected capacity change from 0 to 512 [ 172.352795][ T11] device veth1_macvtap left promiscuous mode [ 172.358949][ T11] device veth0_macvtap left promiscuous mode [ 172.367036][ T11] device veth1_vlan left promiscuous mode [ 172.375306][ T11] device veth0_vlan left promiscuous mode [ 172.426296][ T4631] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.125: corrupted inode contents [ 172.462514][ T4631] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #3: comm syz.3.125: mark_inode_dirty error [ 172.499347][ T4631] EXT4-fs error (device loop3): ext4_do_update_inode:5221: inode #3: comm syz.3.125: corrupted inode contents [ 172.533620][ T4631] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.125: mark_inode_dirty error [ 172.561100][ T4631] Quota error (device loop3): write_blk: dquota write failed [ 172.570488][ T4631] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 172.595532][ T4631] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.125: Failed to acquire dquot type 0 [ 172.657725][ T4631] EXT4-fs (loop3): 1 orphan inode deleted [ 172.675079][ T102] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 172.685546][ T4631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.707198][ T102] EXT4-fs error (device loop3): ext4_release_dquot:6823: comm kworker/u4:4: Failed to release dquot type 1 [ 172.719830][ T4631] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038 (0x7fffffff) [ 172.953224][ T3648] Bluetooth: hci3: command tx timeout [ 173.668741][ T3725] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 174.280306][ T3725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.311667][ T3725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.335119][ T3725] usb 2-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 174.368706][ T3725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.429123][ T3725] usb 2-1: config 0 descriptor?? [ 174.596850][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 174.873545][ T11] team0 (unregistering): Port device team_slave_1 removed [ 174.935671][ T11] team0 (unregistering): Port device team_slave_0 removed [ 174.960922][ T3725] wacom 0003:056A:0101.0003: unknown main item tag 0x0 [ 174.998653][ T3725] wacom 0003:056A:0101.0003: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.1-1/input0 [ 175.032355][ T3639] Bluetooth: hci3: command tx timeout [ 175.058259][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.108949][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.614144][ T11] bond0 (unregistering): Released all slaves [ 175.797483][ T4459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.856098][ T4459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.924339][ T4459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.991408][ T4459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.587035][ T3830] usb 2-1: USB disconnect, device number 2 [ 176.689694][ T4603] chnl_net:caif_netlink_parms(): no params data found [ 177.007773][ T4668] loop1: detected capacity change from 0 to 32768 [ 177.020393][ T4668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.130 (4668) [ 177.043309][ T4668] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.054055][ T4668] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 177.062840][ T4668] BTRFS info (device loop1): using free space tree [ 177.102480][ T3639] Bluetooth: hci3: command tx timeout [ 177.237219][ T4678] loop3: detected capacity change from 0 to 2048 [ 177.374286][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.399804][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.421467][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.506502][ T4603] device bridge_slave_0 entered promiscuous mode [ 177.527269][ T4668] BTRFS info (device loop1): enabling ssd optimizations [ 177.613160][ T4678] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.668708][ T4459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.701398][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.719900][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.754446][ T4678] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 177.782079][ T4678] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.782079][ T4678] [ 177.783118][ T4603] device bridge_slave_1 entered promiscuous mode [ 178.464142][ T4704] dlm: no local IP address has been set [ 178.469859][ T4704] dlm: cannot start dlm midcomms -107 [ 178.902307][ T4678] EXT4-fs (loop3): Total free blocks count 0 [ 178.947261][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.962654][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.982459][ T4678] EXT4-fs (loop3): Free/Dirty block details [ 178.988590][ T4678] EXT4-fs (loop3): free_blocks=2415919104 [ 178.999737][ T4122] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.016722][ T4459] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.031791][ T4678] EXT4-fs (loop3): dirty_blocks=32 [ 179.036961][ T4678] EXT4-fs (loop3): Block reservation details [ 179.123099][ T4678] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 179.192094][ T3639] Bluetooth: hci3: command tx timeout [ 179.449853][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.482262][ T3842] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 179.533257][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.546743][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.595248][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.602391][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.659262][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.693143][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.707022][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.738240][ T3968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.889686][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.896914][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.701620][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.869626][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.944930][ T4732] netlink: 104 bytes leftover after parsing attributes in process `syz.1.135'. [ 180.962334][ T4732] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.756411][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.776850][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.812902][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.839536][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.893703][ T4603] team0: Port device team_slave_0 added [ 182.924363][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.006710][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.025215][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.075419][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.035930][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.088277][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.092829][ T4748] fuse: Unknown parameter '0x0000000000000005' [ 184.155374][ T4603] team0: Port device team_slave_1 added [ 184.174558][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.213832][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.293720][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.837810][ T4710] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 185.172856][ T4750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 185.231480][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.282839][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.290093][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.378440][ T4763] loop1: detected capacity change from 0 to 2048 [ 185.386195][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.511820][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.516103][ T4763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 185.527681][ T4710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.539234][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.583353][ T4710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.613527][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.675545][ T4710] usb 4-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 185.697930][ T4710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.742424][ T4710] usb 4-1: config 0 descriptor?? [ 185.781097][ T4603] device hsr_slave_0 entered promiscuous mode [ 185.805995][ T4603] device hsr_slave_1 entered promiscuous mode [ 185.821006][ T4603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.855704][ T4603] Cannot create hsr debugfs directory [ 187.155321][ T4784] hub 9-0:1.0: USB hub found [ 187.160690][ T4784] hub 9-0:1.0: 8 ports detected [ 187.258219][ T4710] wacom 0003:056A:0101.0004: unknown main item tag 0x0 [ 187.270168][ T4710] wacom 0003:056A:0101.0004: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.3-1/input0 [ 188.340379][ T41] usb 4-1: USB disconnect, device number 5 [ 188.352336][ T4122] EXT4-fs (loop1): unmounting filesystem. [ 188.690361][ T4801] loop1: detected capacity change from 0 to 128 [ 188.775320][ T4801] EXT4-fs: Ignoring removed i_version option [ 189.547053][ T4801] EXT4-fs: Ignoring removed orlov option [ 189.639045][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.698528][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.710918][ T4801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.743272][ T4801] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 189.790346][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.365664][ T4122] EXT4-fs (loop1): unmounting filesystem. [ 191.438538][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.456042][ T4829] loop1: detected capacity change from 0 to 256 [ 191.472768][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.300965][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.326158][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.342635][ T4844] netlink: 'syz.4.152': attribute type 11 has an invalid length. [ 193.364270][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.378328][ T4838] loop3: detected capacity change from 0 to 1024 [ 193.398012][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.421082][ T4843] device bridge_slave_1 left promiscuous mode [ 193.431568][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.479297][ T4459] device veth0_vlan entered promiscuous mode [ 193.627198][ T4459] device veth1_vlan entered promiscuous mode [ 193.745662][ T4852] loop3: detected capacity change from 0 to 128 [ 193.913179][ T26] audit: type=1800 audit(1725086417.166:73): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="file0" dev="loop3" ino=1048633 res=0 errno=0 [ 194.236672][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244714][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.411222][ T26] audit: type=1800 audit(1725086418.656:74): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="bus" dev="loop3" ino=1048634 res=0 errno=0 [ 195.707268][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.727002][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.862779][ T4459] device veth0_macvtap entered promiscuous mode [ 196.908051][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.927326][ T4459] device veth1_macvtap entered promiscuous mode [ 197.248505][ T4866] loop3: detected capacity change from 0 to 2048 [ 197.325903][ T4878] input: syz1 as /devices/virtual/input/input16 [ 198.144972][ T4882] loop4: detected capacity change from 0 to 512 [ 198.188003][ T4882] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a003c019, mo2=0000] [ 198.211780][ T4882] System zones: 0-2, 18-18, 34-34 [ 198.224110][ T4866] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 198.240762][ T4882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 198.282692][ T4882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 198.335020][ T4882] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.159: Failed to acquire dquot type 0 [ 198.404527][ T4882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 198.430221][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.454548][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.471709][ T4882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 198.499339][ T4882] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.159: Failed to acquire dquot type 0 [ 198.511710][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.539032][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.551812][ T4882] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 198.578516][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.606714][ T4882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 198.617594][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.641696][ T4882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 198.660773][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.661164][ T4866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.687970][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.688127][ T4882] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.159: Failed to acquire dquot type 0 [ 198.703535][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.730399][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.762714][ T4882] EXT4-fs (loop4): 1 orphan inode deleted [ 198.768694][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.773612][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.830934][ T4882] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 198.986769][ T4603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.030502][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.046022][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.506877][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.561116][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.598717][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.648890][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.679187][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.711643][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.731627][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.752647][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.770183][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.781208][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.805117][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.838598][ T11] device hsr_slave_0 left promiscuous mode [ 199.873830][ T11] device hsr_slave_1 left promiscuous mode [ 199.892032][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.903388][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.923617][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.931150][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.942247][ T11] device bridge_slave_1 left promiscuous mode [ 199.948516][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.989168][ T11] device bridge_slave_0 left promiscuous mode [ 199.997119][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.013219][ T4901] loop1: detected capacity change from 0 to 16 [ 200.036152][ T4901] erofs: (device loop1): mounted with root inode @ nid 36. [ 200.048836][ T11] device veth1_macvtap left promiscuous mode [ 200.056424][ T4901] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 200.065383][ T11] device veth0_macvtap left promiscuous mode [ 200.076386][ T11] device veth1_vlan left promiscuous mode [ 200.082424][ T11] device veth0_vlan left promiscuous mode [ 200.239779][ T4901] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 200.279505][ T4901] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 200.753224][ T4901] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 200.764393][ T4901] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 200.778266][ T4901] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 201.324989][ T4915] netlink: 'syz.1.163': attribute type 11 has an invalid length. [ 201.784659][ T11] team0 (unregistering): Port device team_slave_1 removed [ 201.840159][ T11] team0 (unregistering): Port device team_slave_0 removed [ 201.888597][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.940990][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.444017][ T11] bond0 (unregistering): Released all slaves [ 202.548606][ T4603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.608392][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.618570][ T4219] EXT4-fs (loop4): unmounting filesystem. [ 202.619260][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.640177][ T4459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.649999][ T4459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.690374][ T4459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.699533][ T4459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.727375][ T4919] loop4: detected capacity change from 0 to 512 [ 202.751145][ T4912] device bridge_slave_1 left promiscuous mode [ 202.759542][ T4912] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.771859][ T4603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.785817][ T4193] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.790091][ T4603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.950572][ T3690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.969221][ T3690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.014371][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.079161][ T3690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.093217][ T3690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.102784][ T4924] loop1: detected capacity change from 0 to 512 [ 203.147275][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.151125][ T4924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.207040][ T4924] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 203.247456][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.276146][ T4924] EXT4-fs (loop1): 1 truncate cleaned up [ 203.288437][ T4924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 203.292561][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.316310][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.337048][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.644277][ T4940] loop0: detected capacity change from 0 to 764 [ 204.698716][ T4940] rock: directory entry would overflow storage [ 204.717250][ T4940] rock: sig=0x4654, size=5, remaining=4 [ 207.012135][ T4924] team0 (unregistering): Port device team_slave_0 removed [ 207.123776][ T4924] team0 (unregistering): Port device team_slave_1 removed [ 207.223530][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.344898][ T4968] loop4: detected capacity change from 0 to 16 [ 207.365005][ T4968] erofs: (device loop4): mounted with root inode @ nid 36. [ 207.646325][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.123651][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.130804][ T3969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.286313][ T4122] EXT4-fs (loop1): unmounting filesystem. [ 208.325612][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.124830][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.170707][ T26] audit: type=1326 audit(1725086432.416:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4973 comm="syz.3.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0779eb9 code=0x0 [ 209.200589][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.207766][ T3969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.243626][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.254497][ T4985] netlink: 'syz.1.173': attribute type 11 has an invalid length. [ 209.287423][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.297166][ T4987] Bluetooth: MGMT ver 1.22 [ 209.326508][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 209.352610][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.421664][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.437289][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.517823][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.557969][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.587810][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.629193][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.635491][ T4992] loop3: detected capacity change from 0 to 512 [ 209.660804][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.685989][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.717164][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.850879][ T4992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.870370][ T4992] ext4 filesystem being mounted at /49/bus supports timestamps until 2038 (0x7fffffff) [ 209.887078][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.649559][ T5005] loop1: detected capacity change from 0 to 2048 [ 211.685689][ T5005] hpfs: hpfs_map_sector(): read error [ 211.768853][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.873637][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 212.078889][ T5017] loop3: detected capacity change from 0 to 764 [ 212.191140][ T5017] rock: directory entry would overflow storage [ 212.226280][ T5017] rock: sig=0x4654, size=5, remaining=4 [ 212.255327][ T5014] loop1: detected capacity change from 0 to 1024 [ 212.318407][ T5019] loop4: detected capacity change from 0 to 2048 [ 212.320625][ T5019] UDF-fs: bad mount option "gid=˙˙˙˙" or missing value [ 212.364508][ T5014] hfsplus: request for non-existent node 3 in B*Tree [ 212.365107][ T5014] hfsplus: request for non-existent node 3 in B*Tree [ 212.653565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.725241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.383137][ T3639] Bluetooth: hci5: Dropping invalid advertising data [ 213.390281][ T3639] Bluetooth: hci5: Dropping invalid advertising data [ 213.397105][ T3639] Bluetooth: hci5: Dropping invalid advertising data [ 213.404099][ T3639] Bluetooth: hci5: Malformed LE Event: 0x02 [ 213.504180][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.086723][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.105909][ T5032] loop3: detected capacity change from 0 to 128 [ 214.141051][ T5034] loop0: detected capacity change from 0 to 512 [ 214.150725][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.169336][ T5032] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.191787][ T5034] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.198316][ T5034] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.221369][ T5034] EXT4-fs: Ignoring removed i_version option [ 214.265946][ T5034] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.182: invalid block [ 214.330487][ T26] audit: type=1804 audit(1725086437.576:76): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.181" name="/newroot/51/file0/cgroup.controllers" dev="loop3" ino=1048642 res=1 errno=0 [ 214.389237][ T5034] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.182: couldn't read orphan inode 11 (err -117) [ 214.483845][ T26] audit: type=1326 audit(1725086437.736:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5018 comm="syz.4.180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad73f79eb9 code=0x0 [ 214.512913][ T5034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.542209][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.552526][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.618566][ T5040] trusted_key: encrypted_key: master key parameter 'ecryptf' is invalid [ 214.787308][ T5034] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.182: Directory hole found for htree leaf block 0 [ 215.210468][ T4603] device veth0_vlan entered promiscuous mode [ 215.356744][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.598443][ T5047] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.182: Directory hole found for htree leaf block 0 [ 215.900368][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.141058][ T5048] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.182: Directory hole found for htree leaf block 0 [ 216.161120][ T5023] loop4: detected capacity change from 0 to 164 [ 216.234197][ T4193] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.527675][ T5045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.182'. [ 216.608715][ T4603] device veth1_vlan entered promiscuous mode [ 216.619009][ T4459] EXT4-fs (loop0): unmounting filesystem. [ 216.993459][ T5061] loop3: detected capacity change from 0 to 2048 [ 217.644165][ T5061] loop3: p1 < > p4 [ 217.650254][ T5061] loop3: p4 size 8388608 extends beyond EOD, truncated [ 217.770666][ T5065] device bridge_slave_1 left promiscuous mode [ 217.777544][ T5068] netlink: 'syz.0.186': attribute type 11 has an invalid length. [ 217.790412][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.790991][ T4193] udevd[4193]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 217.831597][ T4190] udevd[4190]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 217.946789][ T5071] netlink: 60 bytes leftover after parsing attributes in process `syz.4.187'. [ 218.009839][ T5071] loop4: detected capacity change from 0 to 1024 [ 218.818779][ T5071] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.828415][ T5071] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.836920][ T5071] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=2 [ 218.848440][ T5071] EXT4-fs warning (device loop4): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 218.863171][ T5071] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 218.877248][ T5071] EXT4-fs (loop4): 1 truncate cleaned up [ 218.883017][ T5071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.013555][ T11] device hsr_slave_0 left promiscuous mode [ 219.062984][ T5057] sctp: failed to load transform for md5: -2 [ 219.080502][ T11] device hsr_slave_1 left promiscuous mode [ 219.101233][ T4219] EXT4-fs (loop4): unmounting filesystem. [ 219.109223][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.198994][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.230221][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.247958][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.262778][ T11] device bridge_slave_1 left promiscuous mode [ 219.269489][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.282382][ T11] device bridge_slave_0 left promiscuous mode [ 219.292399][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.389792][ T11] device veth1_macvtap left promiscuous mode [ 219.398695][ T11] device veth0_macvtap left promiscuous mode [ 219.410239][ T11] device veth1_vlan left promiscuous mode [ 219.420882][ T11] device veth0_vlan left promiscuous mode [ 219.600591][ T5085] input: syz1 as /devices/virtual/input/input17 [ 220.482501][ T5091] loop4: detected capacity change from 0 to 1024 [ 220.560252][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.710054][ T26] audit: type=1326 audit(1725086443.956:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.4.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad73f79eb9 code=0x0 [ 221.282064][ T11] team0 (unregistering): Port device team_slave_1 removed [ 221.359588][ T11] team0 (unregistering): Port device team_slave_0 removed [ 221.418236][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.491257][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.210923][ T11] bond0 (unregistering): Released all slaves [ 222.311453][ T4603] device veth0_macvtap entered promiscuous mode [ 222.322979][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 222.342646][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.355555][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.399898][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.415997][ T5097] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 222.438155][ T5091] EXT4-fs (loop4): unmounting filesystem. [ 222.445306][ T4603] device veth1_macvtap entered promiscuous mode [ 222.497941][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.510066][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.527186][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.538204][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.554485][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.565235][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.598018][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.606256][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.615487][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.627025][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.637959][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.648200][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.659406][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.669277][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.679946][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.689871][ T4603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.700373][ T4603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.713953][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.721669][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.731240][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.743481][ T4603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.752879][ T4603] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.762696][ T4603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.771598][ T4603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.875676][ T3991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.895172][ T3991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.896356][ T4861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.911184][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.921349][ T4861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.935917][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.440023][ T5117] loop1: detected capacity change from 0 to 2048 [ 224.655326][ T5117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.673046][ T5110] loop0: detected capacity change from 0 to 2048 [ 224.703041][ T5110] UDF-fs: bad mount option "d}ode=00000000000000000002004" or missing value [ 224.814091][ T5107] vivid-004: ================= START STATUS ================= [ 224.853011][ T5107] vivid-004: Radio HW Seek Mode: Bounded [ 224.861261][ T5107] vivid-004: Radio Programmable HW Seek: false [ 224.870446][ T5107] vivid-004: RDS Rx I/O Mode: Block I/O [ 224.876839][ T5107] vivid-004: Generate RBDS Instead of RDS: false [ 224.885532][ T5107] vivid-004: RDS Reception: true [ 224.891460][ T5107] vivid-004: RDS Program Type: 0 inactive [ 224.910018][ T5107] vivid-004: RDS PS Name: inactive [ 224.916039][ T5107] vivid-004: RDS Radio Text: inactive [ 224.940596][ T5107] vivid-004: RDS Traffic Announcement: false inactive [ 224.950174][ T5107] vivid-004: RDS Traffic Program: false inactive [ 224.960335][ T5107] vivid-004: RDS Music: false inactive [ 224.968214][ T5107] vivid-004: ================== END STATUS ================== [ 224.990041][ T5110] loop0: detected capacity change from 0 to 2048 [ 224.999635][ T5125] loop3: detected capacity change from 0 to 16 [ 225.041895][ T5125] erofs: (device loop3): mounted with root inode @ nid 36. [ 225.123666][ T3639] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 225.146675][ T5122] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 225.248209][ T26] audit: type=1800 audit(1725086448.496:79): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.206" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 225.275949][ T5107] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 225.295806][ T5110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 225.822465][ T5122] syz.3.206 (5122) used greatest stack depth: 18544 bytes left [ 225.895718][ T4122] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 225.964549][ T4122] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 226.148032][ T26] audit: type=1804 audit(1725086449.396:80): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.201" name="/newroot/6/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 226.570513][ T5148] loop4: detected capacity change from 0 to 64 [ 227.212283][ T5146] syz.3.194 uses obsolete (PF_INET,SOCK_PACKET) [ 227.361766][ T3767] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.500698][ T4459] EXT4-fs (loop0): unmounting filesystem. [ 227.639725][ T3767] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.796917][ T5156] netlink: 'syz.0.198': attribute type 11 has an invalid length. [ 228.126525][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.137405][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.152317][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.170549][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.177629][ T3649] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 228.178355][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.191172][ T3649] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 228.195155][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.269404][ T3767] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.299995][ T5164] loop0: detected capacity change from 0 to 64 [ 228.308898][ T3648] Bluetooth: hci2: unexpected event 0x42 length: 6 > 3 [ 228.548957][ T3767] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.311722][ T3648] Bluetooth: hci4: command tx timeout [ 230.319382][ T5174] loop0: detected capacity change from 0 to 8 [ 230.384380][ T5174] SQUASHFS error: Unable to read inode 0x11f [ 230.761321][ T5160] chnl_net:caif_netlink_parms(): no params data found [ 232.069393][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.119702][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.171868][ T5160] device bridge_slave_0 entered promiscuous mode [ 232.190461][ T5198] loop0: detected capacity change from 0 to 4096 [ 232.197664][ T5192] loop3: detected capacity change from 0 to 4096 [ 232.257118][ T5192] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 232.298133][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.305751][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.325136][ T4193] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.344042][ T5160] device bridge_slave_1 entered promiscuous mode [ 232.381668][ T3648] Bluetooth: hci4: command tx timeout [ 232.388672][ T3639] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 232.398912][ T3639] Bluetooth: hci2: Injecting HCI hardware error event [ 232.409388][ T3648] Bluetooth: hci2: hardware error 0x00 [ 232.438556][ T5212] netlink: 'syz.4.214': attribute type 11 has an invalid length. [ 232.556129][ T5160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.583610][ T5192] ntfs: (device loop3): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 232.611128][ T5192] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 232.633675][ T5160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.641392][ T5192] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 232.719316][ T5192] ntfs: volume version 3.1. [ 232.756715][ T5160] team0: Port device team_slave_0 added [ 232.765279][ T5192] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 232.768385][ T5160] team0: Port device team_slave_1 added [ 232.798609][ T5192] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 232.819346][ T5192] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 232.829061][ T5192] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 232.903199][ T5220] device geneve2 entered promiscuous mode [ 232.911908][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 232.943406][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.960988][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.028184][ T5160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.097865][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.105228][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.133668][ T5160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.199633][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 233.278009][ T5160] device hsr_slave_0 entered promiscuous mode [ 233.298530][ T5160] device hsr_slave_1 entered promiscuous mode [ 233.311078][ T5160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.326993][ T5160] Cannot create hsr debugfs directory [ 233.351911][ T41] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 233.374587][ T41] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.384898][ T41] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 233.395189][ T41] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.481916][ T41] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 233.492840][ T41] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.503319][ T41] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 233.516121][ T41] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.574828][ T3767] device hsr_slave_0 left promiscuous mode [ 233.584261][ T3767] device hsr_slave_1 left promiscuous mode [ 233.591218][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.612777][ T41] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 233.645495][ T41] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.651761][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.663497][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.671159][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.688675][ T41] usb 1-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 233.700876][ T41] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.715003][ T3767] device bridge_slave_0 left promiscuous mode [ 233.728287][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.788808][ T3767] device veth1_macvtap left promiscuous mode [ 233.811082][ T3767] device veth0_macvtap left promiscuous mode [ 233.876465][ T3767] device veth1_vlan left promiscuous mode [ 233.901986][ T3767] device veth0_vlan left promiscuous mode [ 233.918481][ T41] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 233.945502][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.004695][ T41] usb 1-1: Product: syz [ 234.008900][ T41] usb 1-1: Manufacturer: syz [ 234.135565][ T41] usb 1-1: SerialNumber: syz [ 234.266295][ T26] audit: type=1326 audit(1725086457.516:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb046d79eb9 code=0x0 [ 234.463124][ T3648] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 234.463169][ T3639] Bluetooth: hci4: command tx timeout [ 234.922782][ T41] adutux 1-1:168.0: interrupt endpoints not found [ 234.962796][ T41] usb 1-1: USB disconnect, device number 7 [ 236.541783][ T3649] Bluetooth: hci4: command tx timeout [ 236.676151][ T5264] loop4: detected capacity change from 0 to 190 [ 236.719798][ T5265] netlink: 'syz.3.227': attribute type 11 has an invalid length. [ 236.728994][ T5264] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 238.434653][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 238.687957][ T5292] loop4: detected capacity change from 0 to 2048 [ 238.729528][ T5292] hpfs: filesystem error: improperly stopped; already mounted read-only [ 238.756169][ T5292] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 238.766361][ T5292] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 239.051199][ T5295] loop4: detected capacity change from 0 to 8192 [ 239.238218][ T3767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.378446][ T3767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.474882][ T5297] loop4: detected capacity change from 0 to 4096 [ 239.789364][ T5303] loop4: detected capacity change from 0 to 16 [ 239.799216][ T5303] erofs: (device loop4): mounted with root inode @ nid 36. [ 239.829619][ T3649] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 239.844081][ T5303] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 239.855658][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 239.855672][ T26] audit: type=1800 audit(1725086463.106:82): pid=5303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.240" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 239.864303][ T5303] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 239.896072][ T5303] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 239.933716][ T3683] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 240.166346][ T3767] bond0 (unregistering): Released all slaves [ 240.311892][ T3683] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 240.331147][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.350155][ T3683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.390359][ T3683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 240.405352][ T3683] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 240.415575][ T3683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.433703][ T3683] usb 3-1: config 0 descriptor?? [ 240.820759][ T5312] loop0: detected capacity change from 0 to 8192 [ 240.862254][ T5312] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.908757][ T5312] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 240.917255][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 240.934537][ T5312] REISERFS (device loop0): using ordered data mode [ 240.961940][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 240.969485][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 240.981760][ T5312] reiserfs: using flush barriers [ 241.004847][ T5312] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.047691][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 241.072634][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 241.089451][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 241.116710][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.125630][ T3683] thrustmaster 0003:044F:B653.0005: unknown main item tag 0x0 [ 241.146603][ T5312] REISERFS (device loop0): checking transaction log (loop0) [ 241.168225][ T3683] thrustmaster 0003:044F:B653.0005: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.2-1/input0 [ 241.192171][ T3683] thrustmaster 0003:044F:B653.0005: no inputs found [ 241.247108][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.403160][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.421979][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.433096][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.443704][ T3648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.451413][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.458999][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.486047][ T5332] loop3: detected capacity change from 0 to 2048 [ 241.493996][ T5332] UDF-fs: bad mount option "gid=˙˙˙˙" or missing value [ 241.515887][ T5312] REISERFS (device loop0): Using tea hash to sort names [ 241.539604][ T5312] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 243.198336][ T26] audit: type=1326 audit(1725086466.446:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5331 comm="syz.3.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0779eb9 code=0x0 [ 243.257895][ T5160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.314577][ T5341] loop3: detected capacity change from 0 to 164 [ 243.335006][ T5160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.382170][ T4193] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.474546][ T4710] usb 3-1: USB disconnect, device number 3 [ 243.501912][ T3648] Bluetooth: hci2: command tx timeout [ 243.562461][ T3767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.173164][ T5160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.214118][ T5160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.397504][ T3767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.483026][ T5365] netlink: 'syz.2.254': attribute type 11 has an invalid length. [ 245.530529][ T5364] device bridge_slave_1 left promiscuous mode [ 245.537505][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.556465][ T5370] loop0: detected capacity change from 0 to 128 [ 245.589329][ T5370] FAT-fs (loop0): bogus number of reserved sectors [ 245.596036][ T3649] Bluetooth: hci2: command tx timeout [ 245.601952][ T5370] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 245.611373][ T5370] FAT-fs (loop0): Can't find a valid FAT filesystem [ 245.620836][ T3767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.692238][ T5376] loop3: detected capacity change from 0 to 256 [ 245.751238][ T3767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.816817][ T26] audit: type=1326 audit(1725086469.066:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 245.937015][ T26] audit: type=1326 audit(1725086469.106:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.396672][ T26] audit: type=1326 audit(1725086469.106:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.670013][ T26] audit: type=1326 audit(1725086469.106:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.701992][ T26] audit: type=1326 audit(1725086469.116:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.751070][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 246.788302][ T26] audit: type=1326 audit(1725086469.116:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.841700][ T26] audit: type=1326 audit(1725086469.116:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.870424][ T26] audit: type=1326 audit(1725086469.116:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 246.929175][ T26] audit: type=1326 audit(1725086469.116:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 247.019665][ T26] audit: type=1326 audit(1725086469.116:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1df79eb9 code=0x7ffc0000 [ 247.024235][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.065921][ T3681] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 247.492226][ T3681] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 247.561243][ T3681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.680789][ T3648] Bluetooth: hci2: command tx timeout [ 247.711441][ T3681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.761566][ T3681] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 247.841754][ T3681] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 247.867938][ T3681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.871691][ T5405] loop3: detected capacity change from 0 to 512 [ 247.907756][ T3681] usb 1-1: config 0 descriptor?? [ 247.954018][ T5405] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.962939][ T5405] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.265: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 247.993334][ T5405] EXT4-fs error (device loop3): ext4_quota_enable:6994: comm syz.3.265: Bad quota inode: 4, type: 1 [ 248.028357][ T5405] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.051957][ T5405] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 248.059011][ T5405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 248.099032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.111066][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 248.119051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.183606][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.204290][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.213030][ T5333] device bridge_slave_0 entered promiscuous mode [ 248.305066][ T5160] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.316636][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.338085][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.358025][ T5333] device bridge_slave_1 entered promiscuous mode [ 248.427754][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.447810][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.457251][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.468165][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.469859][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.482702][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.496708][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.503894][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.511697][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.519809][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.524534][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.537162][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.539628][ T5422] loop3: detected capacity change from 0 to 4096 [ 248.556549][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.558057][ T3681] thrustmaster 0003:044F:B653.0006: unknown main item tag 0x0 [ 248.563830][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.580476][ T5422] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 248.603954][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.609085][ T5389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.659485][ T3681] thrustmaster 0003:044F:B653.0006: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.0-1/input0 [ 248.671839][ T3681] thrustmaster 0003:044F:B653.0006: no inputs found [ 248.697282][ T5389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.713830][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.736115][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.821991][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.052931][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.823131][ T3648] Bluetooth: hci2: command tx timeout [ 249.827702][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 249.895721][ T5333] team0: Port device team_slave_0 added [ 249.920924][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.939702][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.950276][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.969505][ T5333] team0: Port device team_slave_1 added [ 250.059064][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.070690][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.071648][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 250.118133][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.126773][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.153741][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.179954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.209585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.211956][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 250.240940][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.250400][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.330560][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.398943][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.409357][ T22] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 250.418398][ T22] usb 4-1: Manufacturer: syz [ 250.423319][ T22] usb 4-1: SerialNumber: syz [ 250.436934][ T22] usb 4-1: config 0 descriptor?? [ 250.484548][ T22] em28xx 4-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 250.494108][ T22] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 250.503427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.528743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.576557][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.801682][ T22] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 250.876449][ T5333] device hsr_slave_0 entered promiscuous mode [ 250.931574][ T153] usb 1-1: USB disconnect, device number 8 [ 250.933537][ T5333] device hsr_slave_1 entered promiscuous mode [ 250.991916][ T22] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 251.000635][ T22] em28xx 4-1:0.0: board has no eeprom [ 251.182852][ T22] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 251.208970][ T22] em28xx 4-1:0.0: dvb set to bulk mode. [ 251.279475][ T3714] em28xx 4-1:0.0: Binding DVB extension [ 251.314912][ T3767] device hsr_slave_0 left promiscuous mode [ 251.327918][ T22] usb 4-1: USB disconnect, device number 6 [ 251.354318][ T5458] loop0: detected capacity change from 0 to 4096 [ 251.356342][ T22] em28xx 4-1:0.0: Disconnecting em28xx [ 251.374955][ T3767] device hsr_slave_1 left promiscuous mode [ 251.503491][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.538625][ T5458] __ntfs_error: 24 callbacks suppressed [ 251.538656][ T5458] ntfs: (device loop0): parse_options(): Unrecognized mount option show_ ys_fiM™ÔviRDles. [ 251.640070][ T5469] loop3: detected capacity change from 0 to 256 [ 251.650082][ T5469] exfat: Deprecated parameter 'utf8' [ 251.655942][ T5469] exfat: Deprecated parameter 'utf8' [ 251.685548][ T3767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.729951][ T5469] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 252.287276][ T3767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.374242][ T3714] em28xx 4-1:0.0: Registering input extension [ 252.381205][ T22] em28xx 4-1:0.0: Closing input extension [ 252.430948][ T22] em28xx 4-1:0.0: Freeing device [ 252.485379][ T3767] device bridge_slave_0 left promiscuous mode [ 252.502391][ T3767] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.613091][ T3767] device veth1_macvtap left promiscuous mode [ 252.638956][ T3767] device veth0_macvtap left promiscuous mode [ 252.645576][ T3767] device veth1_vlan left promiscuous mode [ 252.655469][ T3767] device veth0_vlan left promiscuous mode [ 252.744105][ T5479] loop0: detected capacity change from 0 to 2048 [ 252.791768][ T3648] Bluetooth: hci2: command tx timeout [ 252.809133][ T5479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.413999][ T5488] loop0: detected capacity change from 0 to 2048 [ 253.989628][ T5488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.333454][ T4459] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 254.350606][ T4459] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 254.735370][ T5492] loop3: detected capacity change from 0 to 2048 [ 254.782015][ T5492] hpfs: hpfs_map_sector(): read error [ 255.665951][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678952][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.709560][ T5507] loop3: detected capacity change from 0 to 1024 [ 256.138654][ T5507] hfsplus: request for non-existent node 3 in B*Tree [ 256.148585][ T5507] hfsplus: request for non-existent node 3 in B*Tree [ 256.584098][ T3767] team0 (unregistering): Port device team_slave_1 removed [ 256.689085][ T3767] team0 (unregistering): Port device team_slave_0 removed [ 256.790066][ T3767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.872490][ T3767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.921651][ T3830] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 258.319725][ T3830] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 258.329018][ T3830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.339750][ T3830] usb 4-1: config 0 descriptor?? [ 258.396390][ T3830] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 258.418675][ T3767] bond0 (unregistering): Released all slaves [ 258.668524][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.678130][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.706734][ T5160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.822691][ T3830] gp8psk: usb in 128 operation failed. [ 258.842800][ T3830] gp8psk: usb in 137 operation failed. [ 258.848426][ T3830] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 258.887954][ T3830] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 258.917977][ T3830] usb 4-1: USB disconnect, device number 7 [ 259.014301][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.023948][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.065903][ T5160] device veth0_vlan entered promiscuous mode [ 259.113925][ T5160] device veth1_vlan entered promiscuous mode [ 259.121051][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.155678][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.192288][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.212570][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.230902][ T3969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.377165][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.402438][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.412382][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.444001][ T5160] device veth0_macvtap entered promiscuous mode [ 259.480959][ T5160] device veth1_macvtap entered promiscuous mode [ 259.507895][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.528114][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.662374][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.673844][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.675471][ T3707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.698173][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.709431][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.717674][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.725338][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.650531][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.671640][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.681751][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.699287][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.709280][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.720218][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.731401][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.761921][ T3707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.775449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.788716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.819051][ T5333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.846748][ T3707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.863049][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.873931][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.873955][ T3649] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 260.889374][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.894073][ T3649] Bluetooth: hci3: Injecting HCI hardware error event [ 260.908336][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.912254][ T3648] Bluetooth: hci3: hardware error 0x00 [ 260.921133][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.941258][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.956184][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.966614][ T5333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.988218][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.997142][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.008893][ T5160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.017937][ T5160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.027934][ T5160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.037017][ T5160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.048393][ T5333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.084493][ T3707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.105509][ T5333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.231081][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.271846][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.307473][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.356554][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.391991][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.419002][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.570701][ T5576] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 261.611237][ T5580] netlink: 'syz.2.302': attribute type 11 has an invalid length. [ 261.651293][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.676071][ T5554] chnl_net:caif_netlink_parms(): no params data found [ 261.822057][ T3639] Bluetooth: hci1: command tx timeout [ 261.970992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.987956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.026325][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.047092][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.077959][ T5554] device bridge_slave_0 entered promiscuous mode [ 262.100252][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.120117][ T5581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.197'. [ 262.131793][ T5581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.197'. [ 262.135947][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.153815][ T5581] netlink: 'syz.1.197': attribute type 6 has an invalid length. [ 262.165443][ T5581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.197'. [ 262.171860][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.183953][ T5554] device bridge_slave_1 entered promiscuous mode [ 262.260113][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.270469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.282398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.293373][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.300508][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.309476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.322229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.330764][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.337969][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.375734][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.387822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.397610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.440496][ T5554] team0: Port device team_slave_0 added [ 262.513590][ T5554] team0: Port device team_slave_1 added [ 262.526142][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.536292][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.547096][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.557924][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.567430][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.576516][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.588264][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.597301][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.653602][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.663709][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.676228][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.688318][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.718064][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.733474][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.777013][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.787219][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.817053][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.922856][ T5554] device hsr_slave_0 entered promiscuous mode [ 262.930050][ T5554] device hsr_slave_1 entered promiscuous mode [ 262.942302][ T5554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.950188][ T5554] Cannot create hsr debugfs directory [ 263.038775][ T3648] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 263.207029][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.215042][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.322028][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.416341][ T3707] device hsr_slave_0 left promiscuous mode [ 263.428916][ T3707] device hsr_slave_1 left promiscuous mode [ 263.436153][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.445797][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.454470][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.462378][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.470258][ T3707] device bridge_slave_0 left promiscuous mode [ 263.476986][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.507137][ T3707] device veth1_macvtap left promiscuous mode [ 263.513754][ T3707] device veth0_macvtap left promiscuous mode [ 263.519898][ T3707] device veth1_vlan left promiscuous mode [ 263.526066][ T3707] device veth0_vlan left promiscuous mode [ 263.903795][ T3648] Bluetooth: hci1: command tx timeout [ 264.032630][ T3707] team0 (unregistering): Port device team_slave_1 removed [ 264.079972][ T3707] team0 (unregistering): Port device team_slave_0 removed [ 264.127424][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.173551][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.670666][ T3707] bond0 (unregistering): Released all slaves [ 265.894242][ T5621] loop3: detected capacity change from 0 to 4096 [ 265.901318][ T5621] ntfs: (device loop3): parse_options(): Unrecognized mount option show_sys_fhles. [ 265.932188][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.945790][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.997114][ T3648] Bluetooth: hci1: command tx timeout [ 266.032329][ T4193] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.044642][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.077630][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.138147][ T5333] device veth0_vlan entered promiscuous mode [ 266.173343][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.187807][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.229213][ T5333] device veth1_vlan entered promiscuous mode [ 266.388881][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.513879][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.525031][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.535967][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.549275][ T5554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.563017][ T5333] device veth0_macvtap entered promiscuous mode [ 266.579829][ T5333] device veth1_macvtap entered promiscuous mode [ 266.642110][ T5652] loop3: detected capacity change from 0 to 256 [ 267.292666][ T5554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.313522][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.325057][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.343472][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.359595][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.421256][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.467080][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.507136][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.527903][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.549798][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.571778][ T5554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.604716][ T5659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 267.623851][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.655458][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.678567][ T5554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.712485][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.770873][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.782771][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.804339][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.838558][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.862672][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.879252][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.903731][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.918394][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.931686][ T5333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.940408][ T5333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.959763][ T5333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.978869][ T5333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.991085][ T5676] netlink: 'syz.3.316': attribute type 21 has an invalid length. [ 268.011670][ T5676] netlink: 160 bytes leftover after parsing attributes in process `syz.3.316'. [ 268.062022][ T3648] Bluetooth: hci1: command tx timeout [ 268.469008][ T5554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.167161][ T3767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.188139][ T3767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.196644][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.213871][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.251117][ T5554] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.262326][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.300390][ T3767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.300542][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.340544][ T3767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.377990][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.409680][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.416873][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.493113][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.502442][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.546943][ T5706] netlink: 'syz.1.325': attribute type 11 has an invalid length. [ 269.550877][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.587683][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.612447][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.619618][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.642197][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.680484][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.779346][ T5554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.809282][ T5554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.895471][ T5703] device bridge_slave_1 left promiscuous mode [ 269.919500][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.492201][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.631851][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.654695][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.682839][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.712518][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.727540][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.754245][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.778905][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.819624][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.839161][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.895516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.933722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.953920][ T5554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.040173][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.060473][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.110324][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.119741][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.140123][ T5554] device veth0_vlan entered promiscuous mode [ 272.150289][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.170089][ T3991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.195751][ T5554] device veth1_vlan entered promiscuous mode [ 272.257971][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.268849][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.297643][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.328898][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.354805][ T5554] device veth0_macvtap entered promiscuous mode [ 272.384911][ T5554] device veth1_macvtap entered promiscuous mode [ 272.425888][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.451907][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.471646][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.491611][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.512057][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.541660][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.561572][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.581573][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.603828][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.611182][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.635678][ T5740] loop4: detected capacity change from 0 to 32768 [ 272.650339][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.658658][ T5740] XFS: attr2 mount option is deprecated. [ 272.682007][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.708323][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.725413][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.736969][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.748690][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.760943][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.782013][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.792866][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.794608][ T5740] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 272.803440][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.803463][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.804963][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.851235][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.860989][ T3842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.879369][ T5554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.897662][ T5554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.908704][ T5554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.917737][ T5554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.937006][ T5740] XFS (loop4): Quotacheck needed: Please wait. [ 273.141581][ T5740] XFS (loop4): Quotacheck: Done. [ 273.158287][ T3842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.171618][ T26] audit: type=1326 audit(1725086496.416:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.3.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0779eb9 code=0x0 [ 273.199003][ T3842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.263730][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.273867][ T3767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.290153][ T5333] XFS (loop4): Unmounting Filesystem [ 273.358371][ T3767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.405320][ T3767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.701874][ T4710] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 274.961704][ T4710] usb 1-1: Using ep0 maxpacket: 16 [ 275.169276][ T5798] loop4: detected capacity change from 0 to 32768 [ 275.226963][ T5798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.344 (5798) [ 275.276814][ T4710] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 275.318176][ T4710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.329424][ T4710] usb 1-1: Product: syz [ 275.339764][ T4710] usb 1-1: Manufacturer: syz [ 275.345387][ T4710] usb 1-1: SerialNumber: syz [ 275.358112][ T5798] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.384045][ T4710] r8152-cfgselector 1-1: config 0 descriptor?? [ 275.392903][ T5798] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 275.402113][ T5798] BTRFS info (device loop4): using free space tree [ 275.498846][ T5798] BTRFS info (device loop4): enabling ssd optimizations [ 275.531949][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.543126][ T5333] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.656734][ T4710] r8152-cfgselector 1-1: Unknown version 0x0000 [ 275.731668][ T4711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 275.760767][ T4710] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 275.777680][ T5830] loop3: detected capacity change from 0 to 4096 [ 275.786142][ T11] usb 1-1: config 0 descriptor?? [ 275.951892][ T11] usb 1-1: can't set config #0, error -71 [ 275.957765][ T7] usb 2-1: config 0 has no interfaces? [ 275.963583][ T3830] usb 1-1: USB disconnect, device number 9 [ 275.972383][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 275.997981][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.023408][ T7] usb 2-1: config 0 descriptor?? [ 276.066841][ T3639] Bluetooth: hci1: command tx timeout [ 276.105235][ T5841] loop3: detected capacity change from 0 to 128 [ 276.123187][ T4711] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 276.148181][ T5841] EXT4-fs: Ignoring removed nobh option [ 276.158548][ T4711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.199439][ T5841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.214245][ T4711] usb 3-1: config 0 descriptor?? [ 276.219950][ T5841] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038 (0x7fffffff) [ 276.266835][ T3830] usb 2-1: USB disconnect, device number 3 [ 276.315243][ T5841] EXT4-fs warning (device loop3): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 276.361305][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 276.456374][ T5845] loop3: detected capacity change from 0 to 512 [ 276.515605][ T5845] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 276.579338][ T5845] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 276.606691][ T5845] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.354: Failed to acquire dquot type 0 [ 276.615833][ T5839] loop4: detected capacity change from 0 to 65536 [ 276.628470][ T5849] loop0: detected capacity change from 0 to 512 [ 276.635056][ T5845] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 276.647654][ T5845] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 276.657165][ T5845] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.354: Failed to acquire dquot type 0 [ 276.671233][ T5845] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 276.684734][ T5845] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 276.694300][ T4711] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 276.694331][ T4711] gs_usb: probe of 3-1:0.0 failed with error -71 [ 276.702413][ T4711] usb 3-1: USB disconnect, device number 4 [ 276.718053][ T5845] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.354: Failed to acquire dquot type 0 [ 276.730000][ T5845] EXT4-fs (loop3): 1 orphan inode deleted [ 276.731028][ T5849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.735844][ T5845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.735964][ T5845] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038 (0x7fffffff) [ 276.770284][ T5845] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 276.780221][ T5849] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 276.814888][ T5839] XFS (loop4): Mounting V5 Filesystem [ 276.821871][ T5845] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 276.840881][ T5845] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.354: Failed to acquire dquot type 0 [ 276.885867][ T5839] XFS (loop4): Ending clean mount [ 276.901228][ T5554] EXT4-fs (loop0): unmounting filesystem. [ 276.935484][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 277.088583][ T5868] loop3: detected capacity change from 0 to 1024 [ 277.088847][ T5333] XFS (loop4): Unmounting Filesystem [ 277.451855][ T5879] loop3: detected capacity change from 0 to 512 [ 277.584225][ T5879] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 277.601953][ T5879] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.362: Failed to acquire dquot type 0 [ 277.644869][ T5879] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.362: Failed to acquire dquot type 0 [ 277.675928][ T5879] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.362: Failed to acquire dquot type 0 [ 277.721830][ T5879] EXT4-fs (loop3): 1 orphan inode deleted [ 277.727804][ T5879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.795575][ T5879] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038 (0x7fffffff) [ 277.831635][ T5835] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 277.875074][ T5879] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.362: Failed to acquire dquot type 0 [ 277.949372][ T3634] EXT4-fs (loop3): unmounting filesystem. [ 278.232847][ T5835] usb 1-1: config 0 has no interfaces? [ 278.238509][ T5835] usb 1-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 278.264794][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.305299][ T5835] usb 1-1: config 0 descriptor?? [ 278.472297][ T5931] xt_l2tp: v2 sid > 0xffff: 262144 [ 278.566815][ T3683] usb 1-1: USB disconnect, device number 10 [ 278.624308][ T5939] devtmpfs: Bad value for 'mpol' [ 278.776163][ T5945] tipc: Started in network mode [ 278.781318][ T5945] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 278.802595][ T5945] tipc: Enabling of bearer rejected, failed to enable media [ 278.955096][ T5958] loop4: detected capacity change from 0 to 256 [ 279.049335][ T5958] FAT-fs (loop4): Directory bread(block 64) failed [ 279.057508][ T5958] FAT-fs (loop4): Directory bread(block 65) failed [ 279.077866][ T5958] FAT-fs (loop4): Directory bread(block 66) failed [ 279.090153][ T5958] FAT-fs (loop4): Directory bread(block 67) failed [ 279.101810][ T5958] FAT-fs (loop4): Directory bread(block 68) failed [ 279.111832][ T5958] FAT-fs (loop4): Directory bread(block 69) failed [ 279.127637][ T5958] FAT-fs (loop4): Directory bread(block 70) failed [ 279.142095][ T5958] FAT-fs (loop4): Directory bread(block 71) failed [ 279.199451][ T5958] FAT-fs (loop4): Directory bread(block 72) failed [ 279.226328][ T5958] FAT-fs (loop4): Directory bread(block 73) failed [ 279.279861][ T5973] loop0: detected capacity change from 0 to 512 [ 279.340279][ T5973] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.395711][ T5973] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 279.445737][ T5973] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.406: corrupted in-inode xattr [ 279.563095][ T5973] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.406: couldn't read orphan inode 15 (err -117) [ 279.575002][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 279.575016][ T26] audit: type=1326 audit(1725086502.816:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.3.414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce0779eb9 code=0x0 [ 279.630579][ T5973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.698621][ T5997] ------------[ cut here ]------------ [ 279.704189][ T5997] WARNING: CPU: 0 PID: 5997 at net/wireless/core.h:231 __cfg80211_wext_giwrate+0x4a1/0x570 [ 279.714568][ T5997] Modules linked in: [ 279.718502][ T5997] CPU: 0 PID: 5997 Comm: syz.1.417 Not tainted 6.1.107-syzkaller #0 [ 279.726546][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 279.736686][ T5997] RIP: 0010:__cfg80211_wext_giwrate+0x4a1/0x570 [ 279.743019][ T5997] Code: 04 25 28 00 00 00 48 3b 84 24 c0 01 00 00 0f 85 d3 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0f 00 6f f7 <0f> 0b e9 63 fd ff ff e8 03 00 6f f7 0f 0b e9 6d fe ff ff 89 d9 80 [ 279.762707][ T5997] RSP: 0018:ffffc90005267a20 EFLAGS: 00010287 [ 279.768808][ T5997] RAX: ffffffff8a1bae61 RBX: 0000000000000000 RCX: 0000000000040000 [ 279.776855][ T5997] RDX: ffffc9000fd2a000 RSI: 00000000000003a8 RDI: 00000000000003a9 [ 279.784897][ T5997] RBP: ffffc90005267c28 R08: ffffffff8a1bab99 R09: ffffc90005267bb0 [ 279.792945][ T5997] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff92000a4cf4c [ 279.801043][ T5997] R13: dffffc0000000000 R14: ffff888026a6cc90 R15: 1ffff11004d4d992 [ 279.809189][ T5997] FS: 00007f81a5bfb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 279.818266][ T5997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.825007][ T5997] CR2: 0000000020000040 CR3: 00000000524b7000 CR4: 00000000003506f0 [ 279.833044][ T5997] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.841050][ T5997] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.849105][ T5997] Call Trace: [ 279.852436][ T5997] [ 279.855384][ T5997] ? __warn+0x15a/0x520 [ 279.859561][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 279.865288][ T5997] ? report_bug+0x2af/0x500 [ 279.869817][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 279.875537][ T5997] ? handle_bug+0x3d/0x70 [ 279.879883][ T5997] ? exc_invalid_op+0x16/0x40 [ 279.884630][ T5997] ? asm_exc_invalid_op+0x16/0x20 [ 279.889689][ T5997] ? __cfg80211_wext_giwrate+0x1d9/0x570 [ 279.895404][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 279.901092][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 279.906885][ T5997] ? __mutex_trylock_common+0x17e/0x2e0 [ 279.912506][ T5997] ? __cfg80211_wext_siwrate+0x970/0x970 [ 279.918184][ T5997] ? dev_load+0x1d/0x1e0 [ 279.922510][ T5997] ? wext_ioctl_dispatch+0xb9/0x460 [ 279.927731][ T5997] ? __lock_acquire+0x1f80/0x1f80 [ 279.932868][ T5997] ? full_name_hash+0x8f/0xe0 [ 279.937602][ T5997] ioctl_standard_call+0xdb/0x280 [ 279.942708][ T5997] ? __cfg80211_wext_siwrate+0x970/0x970 [ 279.948465][ T5997] ? __cfg80211_wext_siwrate+0x970/0x970 [ 279.954172][ T5997] wext_ioctl_dispatch+0x16f/0x460 [ 279.959313][ T5997] ? wext_ioctl_dispatch+0x460/0x460 [ 279.964668][ T5997] ? iw_handler_get_private+0x1e0/0x1e0 [ 279.970254][ T5997] wext_handle_ioctl+0x15b/0x260 [ 279.975354][ T5997] ? call_commit_handler+0xf0/0xf0 [ 279.980514][ T5997] sock_ioctl+0x13b/0x770 [ 279.984912][ T5997] ? sock_poll+0x410/0x410 [ 279.989359][ T5997] ? __fget_files+0x28/0x4a0 [ 279.994027][ T5997] ? __fget_files+0x435/0x4a0 [ 279.998731][ T5997] ? __fget_files+0x28/0x4a0 [ 280.003403][ T5997] ? bpf_lsm_file_ioctl+0x5/0x10 [ 280.008368][ T5997] ? security_file_ioctl+0x7d/0xa0 [ 280.013559][ T5997] ? sock_poll+0x410/0x410 [ 280.018034][ T5997] __se_sys_ioctl+0xf1/0x160 [ 280.022713][ T5997] do_syscall_64+0x3b/0xb0 [ 280.027160][ T5997] ? clear_bhb_loop+0x45/0xa0 [ 280.031930][ T5997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.037857][ T5997] RIP: 0033:0x7f81a4d79eb9 [ 280.042348][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.062029][ T5997] RSP: 002b:00007f81a5bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.070474][ T5997] RAX: ffffffffffffffda RBX: 00007f81a4f15f80 RCX: 00007f81a4d79eb9 [ 280.078615][ T5997] RDX: 0000000020000040 RSI: 0000000000008b21 RDI: 0000000000000004 [ 280.086651][ T5997] RBP: 00007f81a4de793e R08: 0000000000000000 R09: 0000000000000000 [ 280.094705][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.102826][ T5997] R13: 0000000000000000 R14: 00007f81a4f15f80 R15: 00007ffdbbbf7d08 [ 280.111108][ T5997] [ 280.114201][ T5997] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 280.121536][ T5997] CPU: 0 PID: 5997 Comm: syz.1.417 Not tainted 6.1.107-syzkaller #0 [ 280.129534][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 280.139617][ T5997] Call Trace: [ 280.142910][ T5997] [ 280.145848][ T5997] dump_stack_lvl+0x1e3/0x2cb [ 280.150557][ T5997] ? nf_tcp_handle_invalid+0x642/0x642 [ 280.156061][ T5997] ? panic+0x764/0x764 [ 280.160154][ T5997] ? 0xffffffffa0003b40 [ 280.164330][ T5997] ? vscnprintf+0x59/0x80 [ 280.168686][ T5997] panic+0x318/0x764 [ 280.170275][ T5995] loop4: detected capacity change from 0 to 32768 [ 280.171464][ T5995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.416 (5995) [ 280.191143][ T5997] ? __warn+0x169/0x520 [ 280.195304][ T5997] ? memcpy_page_flushcache+0xfc/0xfc [ 280.200697][ T5997] __warn+0x348/0x520 [ 280.204674][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 280.210310][ T5997] report_bug+0x2af/0x500 [ 280.214631][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 280.220266][ T5997] handle_bug+0x3d/0x70 [ 280.224412][ T5997] exc_invalid_op+0x16/0x40 [ 280.228907][ T5997] asm_exc_invalid_op+0x16/0x20 [ 280.233758][ T5997] RIP: 0010:__cfg80211_wext_giwrate+0x4a1/0x570 [ 280.239996][ T5997] Code: 04 25 28 00 00 00 48 3b 84 24 c0 01 00 00 0f 85 d3 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0f 00 6f f7 <0f> 0b e9 63 fd ff ff e8 03 00 6f f7 0f 0b e9 6d fe ff ff 89 d9 80 [ 280.259596][ T5997] RSP: 0018:ffffc90005267a20 EFLAGS: 00010287 [ 280.265657][ T5997] RAX: ffffffff8a1bae61 RBX: 0000000000000000 RCX: 0000000000040000 [ 280.273624][ T5997] RDX: ffffc9000fd2a000 RSI: 00000000000003a8 RDI: 00000000000003a9 [ 280.281592][ T5997] RBP: ffffc90005267c28 R08: ffffffff8a1bab99 R09: ffffc90005267bb0 [ 280.289645][ T5997] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff92000a4cf4c [ 280.297614][ T5997] R13: dffffc0000000000 R14: ffff888026a6cc90 R15: 1ffff11004d4d992 [ 280.305600][ T5997] ? __cfg80211_wext_giwrate+0x1d9/0x570 [ 280.311233][ T5997] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 280.316870][ T5997] ? __mutex_trylock_common+0x17e/0x2e0 [ 280.322415][ T5997] ? __cfg80211_wext_siwrate+0x970/0x970 [ 280.328149][ T5997] ? dev_load+0x1d/0x1e0 [ 280.332383][ T5997] ? wext_ioctl_dispatch+0xb9/0x460 [ 280.337569][ T5997] ? __lock_acquire+0x1f80/0x1f80 [ 280.342609][ T5997] ? full_name_hash+0x8f/0xe0 [ 280.347280][ T5997] ioctl_standard_call+0xdb/0x280 [ 280.352470][ T5997] ? __cfg80211_wext_siwrate+0x970/0x970 [ 280.358188][ T5997] ? __cfg80211_wext_siwrate+0x970/0x970 [ 280.363812][ T5997] wext_ioctl_dispatch+0x16f/0x460 [ 280.368914][ T5997] ? wext_ioctl_dispatch+0x460/0x460 [ 280.374186][ T5997] ? iw_handler_get_private+0x1e0/0x1e0 [ 280.379733][ T5997] wext_handle_ioctl+0x15b/0x260 [ 280.384670][ T5997] ? call_commit_handler+0xf0/0xf0 [ 280.389783][ T5997] sock_ioctl+0x13b/0x770 [ 280.394104][ T5997] ? sock_poll+0x410/0x410 [ 280.398520][ T5997] ? __fget_files+0x28/0x4a0 [ 280.403101][ T5997] ? __fget_files+0x435/0x4a0 [ 280.407772][ T5997] ? __fget_files+0x28/0x4a0 [ 280.412355][ T5997] ? bpf_lsm_file_ioctl+0x5/0x10 [ 280.417283][ T5997] ? security_file_ioctl+0x7d/0xa0 [ 280.422393][ T5997] ? sock_poll+0x410/0x410 [ 280.426813][ T5997] __se_sys_ioctl+0xf1/0x160 [ 280.431399][ T5997] do_syscall_64+0x3b/0xb0 [ 280.435808][ T5997] ? clear_bhb_loop+0x45/0xa0 [ 280.440482][ T5997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.446367][ T5997] RIP: 0033:0x7f81a4d79eb9 [ 280.450772][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.470454][ T5997] RSP: 002b:00007f81a5bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.478859][ T5997] RAX: ffffffffffffffda RBX: 00007f81a4f15f80 RCX: 00007f81a4d79eb9 [ 280.486819][ T5997] RDX: 0000000020000040 RSI: 0000000000008b21 RDI: 0000000000000004 [ 280.494779][ T5997] RBP: 00007f81a4de793e R08: 0000000000000000 R09: 0000000000000000 [ 280.502739][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.510697][ T5997] R13: 0000000000000000 R14: 00007f81a4f15f80 R15: 00007ffdbbbf7d08 [ 280.518678][ T5997] [ 280.522051][ T5997] Kernel Offset: disabled [ 280.526372][ T5997] Rebooting in 86400 seconds..