last executing test programs: 8.754341064s ago: executing program 4 (id=1563): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x0, 0x520, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r7) r9 = request_key(&(0x7f0000000900)='asymmetric\x00', &(0x7f0000000940)={'syz', 0x1}, &(0x7f0000000980)='\x00', 0x0) request_key(&(0x7f0000000c00)='asymmetric\x00', &(0x7f0000000c40)={'syz', 0x1}, 0x0, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC, @ANYRES32=r9, @ANYRES64, @ANYRESHEX, @ANYRES64=r3], 0x177) 6.15898964s ago: executing program 3 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 6.02937084s ago: executing program 3 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ipvlan0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0x1d}}) 5.879133643s ago: executing program 4 (id=1577): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 5.853104355s ago: executing program 2 (id=1578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000000200000001000000000000000000000000000000000000000000000000000000000000000000e200000000000000000002"]) 5.143306934s ago: executing program 3 (id=1580): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000800)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 5.050946681s ago: executing program 1 (id=1581): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='erofs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 4.850918128s ago: executing program 2 (id=1585): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}], [], 0x5c}) 4.83708638s ago: executing program 3 (id=1586): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x58}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000076000d0b00000000000000000300000000"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) memfd_create(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x22a2ca60ee806bd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x11, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.365258171s ago: executing program 1 (id=1588): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/sem\x00', 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x0, 0x520, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r7) r9 = request_key(&(0x7f0000000900)='asymmetric\x00', &(0x7f0000000940)={'syz', 0x1}, &(0x7f0000000980)='\x00', 0x0) request_key(&(0x7f0000000c00)='asymmetric\x00', &(0x7f0000000c40)={'syz', 0x1}, 0x0, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC, @ANYRES32=r9, @ANYRES64, @ANYRESHEX, @ANYRES64=r3], 0x177) 3.337550704s ago: executing program 2 (id=1589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d0000008500000007000000f175e2a6912b95865688e924c3a2e9816967f83d9bda5458bd15ca501eaf6abb77b5bd3a82"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f5c, 0x6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x75, 0x2, 0x76, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7cb9c9085dddf594, 0x40, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', r5, 0x29, 0xff, 0xa2, 0x65fc84, 0x51, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x0, 0xff, 0x5}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0/../file0/file0\x00', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r9, 0x3000) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0xa, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001e00)={'bridge0\x00', 0x0}) bind$packet(r11, &(0x7f0000000240)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) 3.313249736s ago: executing program 4 (id=1591): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000001280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.002247151s ago: executing program 0 (id=1594): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) 2.727473965s ago: executing program 2 (id=1595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000000200000001000000000000000000000000000000000000000000000000000000000000000000e200000000000000000002"]) 2.614987484s ago: executing program 0 (id=1596): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='erofs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 1.842809068s ago: executing program 3 (id=1600): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}], [], 0x5c}) 1.737326886s ago: executing program 0 (id=1601): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000000000000000000797a6b616c6c65723000000000000074756e6c3000000000000000000000007369743000000000000000000000000069666230000000000000000000010000000000000000000000000000ffffffffffff00000000000000002801000060010000b00100006970360000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000010000000000000000000000000000001e4000ffff000000000000000000006d61720000000000000000000000000000000000000008000000000000000000000000001f00000000000000000000000000000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000f5dc818b59642700"/576]}, 0x2b8) 1.544359143s ago: executing program 2 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ipvlan0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0x1d}}) 286.576367ms ago: executing program 0 (id=1603): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfd, 0x187, &(0x7f0000000200)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 272.792488ms ago: executing program 1 (id=1604): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x18) 41.376377ms ago: executing program 3 (id=1605): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180113a945b56c250008000000000000001af8ff10000000bfa100000000000007010000f8ffffffb702000008000000cf030268967523d9d816de7ca869c479a673984138723be0000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-'], 0x31) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x38}], {0x95, 0x0, 0x1c0}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r6 = open(&(0x7f0000000500)='./file0\x00', 0x200102, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r7, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0xe6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[], 0x2d, 0xfffffffffffffff9) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x6f, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x88) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000480012800b0001006272696467650000380002800800050001000000080004000100000005001800000000000c001f000000000000000000060006000700000008001d000100000008000a0001"], 0x70}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180), &(0x7f0000000380)) 38.630377ms ago: executing program 4 (id=1606): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa14000600ff0f5e24ff"], 0x40}}, 0x0) 38.124557ms ago: executing program 2 (id=1607): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xff9d) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x894a, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x149a02, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 1.89968ms ago: executing program 0 (id=1608): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=1609): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000040), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x120, 0x0, 0x0, 0x3e8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): anning with blocksize 512 failed [ 348.441588][ T8331] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 348.504618][ T8331] UDF-fs: Scanning with blocksize 1024 failed [ 348.598548][ T8331] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 348.646191][ T8331] UDF-fs: Scanning with blocksize 2048 failed [ 348.727252][ T8331] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 348.880027][ T8331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.968542][ T8350] netlink: 'syz.4.1149': attribute type 16 has an invalid length. [ 349.050520][ T8350] netlink: 'syz.4.1149': attribute type 17 has an invalid length. [ 349.312694][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.675016][ T8354] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20000 [ 351.125092][ T8361] loop2: detected capacity change from 0 to 512 [ 351.165540][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.176695][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.186378][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.208195][ T8361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.408429][ T26] audit: type=1804 audit(1722488742.049:144): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1150" name="/newroot/28/file0/bus/file0/bus" dev="overlay" ino=19 res=1 errno=0 [ 351.449419][ T8369] loop0: detected capacity change from 0 to 64 [ 351.585854][ T8373] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 351.695819][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 351.720269][ T7683] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 351.752875][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 351.825658][ T7683] EXT4-fs error (device loop2): ext4_lookup:1855: inode #14: comm syz-executor: unexpected EA_INODE flag [ 351.852082][ T8371] device geneve2 entered promiscuous mode [ 351.875258][ T7683] EXT4-fs error (device loop2): ext4_lookup:1855: inode #14: comm syz-executor: unexpected EA_INODE flag [ 352.044933][ T3684] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 352.073454][ T8387] loop3: detected capacity change from 0 to 512 [ 352.137817][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [ 352.143519][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 352.223895][ T7683] EXT4-fs (loop2): unmounting filesystem. [ 352.370482][ T8392] dccp_close: ABORT with 20 bytes unread [ 352.393225][ T8391] loop4: detected capacity change from 0 to 2048 [ 352.564895][ T3684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.666083][ T3684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.817428][ T3684] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 353.068455][ T3684] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.210320][ T8391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 353.310036][ T7693] EXT4-fs (loop3): unmounting filesystem. [ 353.424854][ T3684] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.433946][ T3684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.471889][ T3684] usb 2-1: Product: syz [ 353.589310][ T3684] usb 2-1: Manufacturer: syz [ 353.639542][ T3684] usb 2-1: SerialNumber: syz [ 354.114011][ T3637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.130162][ T3637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.139239][ T3637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.153839][ T3637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.161798][ T3637] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.169595][ T3637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.363138][ T7623] EXT4-fs (loop4): unmounting filesystem. [ 354.449223][ T7212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.606080][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 355.113819][ T8417] loop4: detected capacity change from 0 to 2048 [ 355.149630][ T7212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.174304][ T8417] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.1169: casefold flag without casefold feature [ 355.198625][ T8422] loop0: detected capacity change from 0 to 256 [ 355.204932][ T3684] cdc_ncm 2-1:1.0: bind() failure [ 355.224718][ T3684] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 355.254805][ T3684] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 355.273561][ T8417] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 355.284699][ T3684] usbtest: probe of 2-1:1.1 failed with error -71 [ 355.300274][ T3684] usb 2-1: USB disconnect, device number 15 [ 355.343003][ T7212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.403455][ T8417] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 355.419370][ T8417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 355.448348][ T8422] FAT-fs (loop0): Directory bread(block 64) failed [ 355.451189][ T7212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.488338][ T8422] FAT-fs (loop0): Directory bread(block 65) failed [ 355.521521][ T8422] FAT-fs (loop0): Directory bread(block 66) failed [ 355.611283][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 355.621402][ T8422] FAT-fs (loop0): Directory bread(block 67) failed [ 355.634785][ T6395] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 355.708390][ T8422] FAT-fs (loop0): Directory bread(block 68) failed [ 355.723298][ T8422] FAT-fs (loop0): Directory bread(block 69) failed [ 355.894774][ T8422] FAT-fs (loop0): Directory bread(block 70) failed [ 355.904935][ T8422] FAT-fs (loop0): Directory bread(block 71) failed [ 355.911616][ T8422] FAT-fs (loop0): Directory bread(block 72) failed [ 355.918753][ T8422] FAT-fs (loop0): Directory bread(block 73) failed [ 355.979768][ T8435] devtmpfs: Too few inodes for current use [ 356.005745][ T6395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.070953][ T6395] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.122309][ T6395] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.134094][ T6395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.215032][ T6395] usb 4-1: config 0 descriptor?? [ 356.275189][ T3649] Bluetooth: hci1: command tx timeout [ 356.431404][ T8446] loop1: detected capacity change from 0 to 2048 [ 356.500563][ T7623] EXT4-fs (loop4): unmounting filesystem. [ 356.570963][ T8446] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 356.587608][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.601749][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.610214][ T8405] device bridge_slave_0 entered promiscuous mode [ 356.617091][ T8446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.825973][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.918149][ T6395] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 357.052702][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.149558][ T6395] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 357.316963][ T8439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1174'. [ 357.366631][ T8405] device bridge_slave_1 entered promiscuous mode [ 357.368928][ T6395] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 357.460465][ T6395] usb 4-1: USB disconnect, device number 11 [ 357.498833][ T8453] loop0: detected capacity change from 0 to 2048 [ 357.673757][ T8453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 357.867380][ T7853] EXT4-fs (loop0): unmounting filesystem. [ 358.356613][ T3649] Bluetooth: hci1: command tx timeout [ 358.938590][ T8485] loop0: detected capacity change from 0 to 256 [ 358.991229][ T8485] FAT-fs (loop0): Directory bread(block 64) failed [ 358.998051][ T8485] FAT-fs (loop0): Directory bread(block 65) failed [ 359.006208][ T8485] FAT-fs (loop0): Directory bread(block 66) failed [ 359.012882][ T8485] FAT-fs (loop0): Directory bread(block 67) failed [ 359.020783][ T8485] FAT-fs (loop0): Directory bread(block 68) failed [ 359.027761][ T8485] FAT-fs (loop0): Directory bread(block 69) failed [ 359.034395][ T8485] FAT-fs (loop0): Directory bread(block 70) failed [ 359.041437][ T8485] FAT-fs (loop0): Directory bread(block 71) failed [ 359.048414][ T8485] FAT-fs (loop0): Directory bread(block 72) failed [ 359.055145][ T8485] FAT-fs (loop0): Directory bread(block 73) failed [ 360.442257][ T3649] Bluetooth: hci1: command tx timeout [ 361.074321][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.132004][ T8487] tipc: Started in network mode [ 361.161019][ T8487] tipc: Node identity defeb4adc875, cluster identity 4711 [ 361.181724][ T8487] tipc: Enabled bearer , priority 0 [ 361.201803][ T8488] €Â: renamed from syzkaller0 [ 361.215765][ T8488] tipc: Disabling bearer [ 361.258249][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.488491][ T8405] team0: Port device team_slave_0 added [ 361.625794][ T8405] team0: Port device team_slave_1 added [ 362.732818][ T3649] Bluetooth: hci1: command tx timeout [ 363.266550][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.280982][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.286179][ T8520] loop4: detected capacity change from 0 to 256 [ 363.725125][ T6393] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 363.948480][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.970050][ T8520] FAT-fs (loop4): Directory bread(block 64) failed [ 363.971768][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.983745][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.004626][ T8520] FAT-fs (loop4): Directory bread(block 65) failed [ 364.021572][ T8523] loop0: detected capacity change from 0 to 164 [ 364.035941][ T8520] FAT-fs (loop4): Directory bread(block 66) failed [ 364.070502][ T8520] FAT-fs (loop4): Directory bread(block 67) failed [ 364.097688][ T8520] FAT-fs (loop4): Directory bread(block 68) failed [ 364.104263][ T8520] FAT-fs (loop4): Directory bread(block 69) failed [ 364.129711][ T8523] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 364.157343][ T8525] loop1: detected capacity change from 0 to 2048 [ 364.164928][ T6393] usb 4-1: Using ep0 maxpacket: 32 [ 364.175350][ T8520] FAT-fs (loop4): Directory bread(block 70) failed [ 364.190473][ T8520] FAT-fs (loop4): Directory bread(block 71) failed [ 364.215100][ T8525] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.1197: casefold flag without casefold feature [ 364.216721][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.237348][ T8520] FAT-fs (loop4): Directory bread(block 72) failed [ 364.240852][ T8525] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 364.255731][ T8520] FAT-fs (loop4): Directory bread(block 73) failed [ 364.258370][ T26] audit: type=1326 audit(1722488754.899:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a665773b9 code=0x0 [ 364.324957][ T8525] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 364.332576][ T8525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 364.439753][ T8405] device hsr_slave_0 entered promiscuous mode [ 364.464791][ T6393] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 364.478430][ T8405] device hsr_slave_1 entered promiscuous mode [ 364.489840][ T6393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.567463][ T6393] usb 4-1: Product: syz [ 364.595206][ T6393] usb 4-1: Manufacturer: syz [ 364.600018][ T6393] usb 4-1: SerialNumber: syz [ 364.646183][ T6393] usb 4-1: config 0 descriptor?? [ 364.784398][ T6393] usb 4-1: bad CDC descriptors [ 364.790694][ T8405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.799842][ T6393] usb 4-1: bad CDC descriptors [ 364.809623][ T8405] Cannot create hsr debugfs directory [ 365.184869][ T8540] devtmpfs: Too few inodes for current use [ 365.194865][ T8542] loop0: detected capacity change from 0 to 1024 [ 365.221558][ T8542] hfsplus: request for non-existent node 1 in B*Tree [ 365.279107][ T8542] hfsplus: request for non-existent node 1 in B*Tree [ 365.303073][ T8542] hfsplus: failed to load root directory [ 365.371933][ T6390] usb 4-1: USB disconnect, device number 12 [ 365.502502][ T7800] EXT4-fs (loop1): unmounting filesystem. [ 366.577020][ T8561] tipc: Started in network mode [ 366.583125][ T8561] tipc: Node identity e277ca94e3f7, cluster identity 4711 [ 366.598814][ T8561] tipc: Enabled bearer , priority 0 [ 366.612674][ T8563] €Â: renamed from syzkaller0 [ 366.622394][ T8563] tipc: Disabling bearer [ 366.732047][ T7212] device hsr_slave_0 left promiscuous mode [ 366.746727][ T7212] device hsr_slave_1 left promiscuous mode [ 366.758034][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.804216][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.881555][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.111622][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.257957][ T7212] device bridge_slave_1 left promiscuous mode [ 367.314539][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.374371][ T7212] device bridge_slave_0 left promiscuous mode [ 367.427255][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.577044][ T7212] device veth1_macvtap left promiscuous mode [ 367.583571][ T7212] device veth0_macvtap left promiscuous mode [ 367.644810][ T7212] device veth1_vlan left promiscuous mode [ 367.664124][ T7212] device veth0_vlan left promiscuous mode [ 367.890820][ T8582] loop4: detected capacity change from 0 to 512 [ 368.292148][ T8582] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 368.458551][ T8582] UDF-fs: Scanning with blocksize 512 failed [ 368.516623][ T8586] loop0: detected capacity change from 0 to 1024 [ 368.554633][ T8582] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 368.574235][ T8586] hfsplus: request for non-existent node 1 in B*Tree [ 368.612119][ T8586] hfsplus: request for non-existent node 1 in B*Tree [ 368.628773][ T8582] UDF-fs: Scanning with blocksize 1024 failed [ 368.664785][ T8586] hfsplus: failed to load root directory [ 368.685355][ T8582] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 368.692769][ T8582] UDF-fs: Scanning with blocksize 2048 failed [ 368.717559][ T8591] loop3: detected capacity change from 0 to 2048 [ 368.737040][ T8582] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 368.749073][ T8591] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 368.788844][ T8591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.811481][ T8582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.851605][ T8591] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1212'. [ 370.582169][ T5190] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 370.834668][ T5190] usb 2-1: Using ep0 maxpacket: 16 [ 371.324876][ T5190] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 371.334758][ T5190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.344449][ T5190] usb 2-1: Product: syz [ 371.349811][ T5190] usb 2-1: Manufacturer: syz [ 371.354443][ T5190] usb 2-1: SerialNumber: syz [ 371.361497][ T5190] usb 2-1: config 0 descriptor?? [ 371.412497][ T5190] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 371.423118][ T5190] dvb-usb: bulk message failed: -22 (2/0) [ 371.430146][ T5190] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 371.474288][ T5190] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 371.493713][ T5190] usb 2-1: media controller created [ 371.502014][ T5190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.534176][ T5190] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 371.570231][ T5190] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 371.594124][ T7212] team0 (unregistering): Port device team_slave_1 removed [ 371.687847][ T7212] team0 (unregistering): Port device team_slave_0 removed [ 371.810070][ T7212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.914199][ T7212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.194373][ T5190] rc_core: IR keymap rc-dtt200u not found [ 372.213738][ T5190] Registered IR keymap rc-empty [ 372.221426][ T5190] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 372.236469][ T5190] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 372.356830][ T5190] dvb-usb: schedule remote query interval to 300 msecs. [ 372.363836][ T5190] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 372.411223][ T5190] usb 2-1: USB disconnect, device number 16 [ 372.529307][ T5190] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 373.021751][ T8629] loop0: detected capacity change from 0 to 40427 [ 373.050193][ T8629] F2FS-fs (loop0): invalid crc value [ 373.078864][ T7212] bond0 (unregistering): Released all slaves [ 373.115717][ T8629] F2FS-fs (loop0): Found nat_bits in checkpoint [ 373.275596][ T8629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 373.319461][ T8612] tipc: Enabled bearer , priority 0 [ 373.336645][ T8613] €Â: renamed from syzkaller0 [ 373.343701][ T8613] tipc: Disabling bearer [ 373.590746][ T8641] loop3: detected capacity change from 0 to 512 [ 373.744689][ T8641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 373.753735][ T8641] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 373.798101][ T8648] loop4: detected capacity change from 0 to 2048 [ 373.811952][ T8648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.904903][ T3649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.933337][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.942178][ T3649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.965129][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.973010][ T26] audit: type=1326 audit(1722488764.599:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 373.974586][ T8641] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.1228: corrupted inode contents [ 374.002188][ T26] audit: type=1326 audit(1722488764.599:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 374.032149][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.042443][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.110057][ T8641] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz.3.1228: mark_inode_dirty error [ 374.124011][ T8641] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.1228: corrupted inode contents [ 374.129651][ T26] audit: type=1326 audit(1722488764.649:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 374.224623][ T8641] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1228: mark_inode_dirty error [ 374.343342][ T26] audit: type=1326 audit(1722488764.649:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 374.367103][ T26] audit: type=1326 audit(1722488764.649:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 374.390188][ T26] audit: type=1326 audit(1722488764.679:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 374.911086][ T26] audit: type=1326 audit(1722488764.679:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 375.068000][ T26] audit: type=1326 audit(1722488764.679:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 375.091278][ T26] audit: type=1326 audit(1722488764.699:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 375.138221][ T26] audit: type=1326 audit(1722488764.719:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aaf773b9 code=0x7ffc0000 [ 375.200267][ T8665] loop0: detected capacity change from 0 to 2048 [ 375.370587][ T8665] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1231: casefold flag without casefold feature [ 375.386249][ T8665] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 375.433513][ T8665] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 375.450171][ T8665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 376.106677][ T7693] EXT4-fs (loop3): unmounting filesystem. [ 376.114823][ T3637] Bluetooth: hci2: command tx timeout [ 376.242488][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 377.035226][ T8665] devtmpfs: Too few inodes for current use [ 377.103383][ T8405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.150029][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.150808][ T7853] EXT4-fs (loop0): unmounting filesystem. [ 377.179512][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.235855][ T8651] device bridge_slave_0 entered promiscuous mode [ 377.243944][ T8405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.286375][ T6390] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 377.302381][ T8405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.313066][ T3637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.329738][ T3637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.338909][ T3637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.364789][ T3637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.374129][ T3637] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.381988][ T3637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.429608][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.437170][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.445837][ T8651] device bridge_slave_1 entered promiscuous mode [ 377.474202][ T8405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.544612][ T6390] usb 5-1: Using ep0 maxpacket: 16 [ 377.572020][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.616272][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.716943][ T8651] team0: Port device team_slave_0 added [ 377.735944][ T8651] team0: Port device team_slave_1 added [ 377.824744][ T6390] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 377.833929][ T6390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.855118][ T6390] usb 5-1: Product: syz [ 377.859319][ T6390] usb 5-1: Manufacturer: syz [ 377.864171][ T6390] usb 5-1: SerialNumber: syz [ 377.886442][ T6390] usb 5-1: config 0 descriptor?? [ 377.906881][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.924097][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.952637][ T6390] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 377.972837][ T6390] dvb-usb: bulk message failed: -22 (2/0) [ 377.982927][ T6390] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 377.991598][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.015436][ T6390] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 378.032869][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.036569][ T6390] usb 5-1: media controller created [ 378.040094][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.061949][ T6390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.104578][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.111186][ T6390] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 378.163418][ T6390] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 378.194691][ T3649] Bluetooth: hci2: command tx timeout [ 378.310095][ T8651] device hsr_slave_0 entered promiscuous mode [ 378.335415][ T8651] device hsr_slave_1 entered promiscuous mode [ 378.365065][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.373534][ T8651] Cannot create hsr debugfs directory [ 378.391121][ T8695] loop0: detected capacity change from 0 to 40427 [ 378.419079][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.419619][ T6390] rc_core: IR keymap rc-dtt200u not found [ 378.442841][ T8695] F2FS-fs (loop0): invalid crc value [ 378.476157][ T6390] Registered IR keymap rc-empty [ 378.485547][ T6390] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 378.499831][ T6390] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input18 [ 378.522050][ T8405] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.536696][ T6390] dvb-usb: schedule remote query interval to 300 msecs. [ 378.540558][ T8695] F2FS-fs (loop0): Found nat_bits in checkpoint [ 378.543663][ T6390] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 378.582941][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.595295][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.596571][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.609396][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.625304][ T6390] usb 5-1: USB disconnect, device number 16 [ 378.749962][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.773503][ T6390] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 378.792894][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.817181][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.824382][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.832272][ T8695] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 378.872896][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.908795][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.931635][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.938869][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.025816][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 379.072974][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.083763][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 379.111445][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.140045][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.171389][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.359037][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.424245][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.445282][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.474808][ T3649] Bluetooth: hci3: command tx timeout [ 379.491934][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.513990][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.526335][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.538399][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.662879][ T8405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.880727][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.923173][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.985300][ T8690] device bridge_slave_0 entered promiscuous mode [ 380.040375][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.072374][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.099425][ T8690] device bridge_slave_1 entered promiscuous mode [ 380.268868][ T8651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.274857][ T3649] Bluetooth: hci2: command tx timeout [ 381.467040][ T8651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.500772][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.616549][ T3649] Bluetooth: hci3: command tx timeout [ 382.194073][ T8651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.295490][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 382.295508][ T26] audit: type=1400 audit(1722488772.929:157): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AA7F8EC696C7F728D9CBCE7CC29B047B7865D1CD970ED3359DB6D8EE9D63E983A pid=8753 comm="syz.0.1242" [ 382.328333][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.346254][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.355098][ T3637] Bluetooth: hci2: command tx timeout [ 382.376582][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.392565][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.437888][ T8651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.525553][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.543663][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.580363][ T8690] team0: Port device team_slave_0 added [ 382.609880][ T8757] loop0: detected capacity change from 0 to 4096 [ 382.660246][ T8757] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 382.691768][ T8757] ntfs3: loop0: Failed to load $MFT. [ 382.722120][ T7212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.774768][ T8690] team0: Port device team_slave_1 added [ 382.879577][ T8405] device veth0_vlan entered promiscuous mode [ 382.979011][ T7212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.030133][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.042358][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.052708][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.061084][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.452543][ T8773] loop4: detected capacity change from 0 to 256 [ 383.468292][ T8773] FAT-fs (loop4): Unrecognized mount option "umask=00000000000000000136030" or missing value [ 383.634668][ T3637] Bluetooth: hci3: command tx timeout [ 383.672461][ T7212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.927558][ T8405] device veth1_vlan entered promiscuous mode [ 383.935195][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.942169][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.037722][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.063449][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.077972][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.108469][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.137290][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1244'. [ 384.150251][ T8772] device ip6gretap1 entered promiscuous mode [ 384.175927][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 384.305396][ T7212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.444525][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.459885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.520419][ T8405] device veth0_macvtap entered promiscuous mode [ 384.619210][ T8786] loop4: detected capacity change from 0 to 128 [ 385.234771][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.330628][ T8651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.407210][ T8405] device veth1_macvtap entered promiscuous mode [ 385.440429][ T8778] loop0: detected capacity change from 0 to 40427 [ 385.449691][ T8778] F2FS-fs (loop0): invalid crc value [ 385.460694][ T8651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.498953][ T8651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.524320][ T8778] F2FS-fs (loop0): Found nat_bits in checkpoint [ 385.596213][ T8690] device hsr_slave_0 entered promiscuous mode [ 385.603441][ T8690] device hsr_slave_1 entered promiscuous mode [ 385.621198][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.641830][ T8690] Cannot create hsr debugfs directory [ 385.641874][ T8778] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 385.704805][ T8651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.715055][ T3637] Bluetooth: hci3: command tx timeout [ 385.730169][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.771248][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.781738][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.796586][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.806872][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.817792][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.828238][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.839273][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.868096][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.934807][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.975345][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.986563][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.024574][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.034437][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.053615][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.073767][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.094618][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.122445][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.151911][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.202088][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.246803][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.250389][ T26] audit: type=1400 audit(1722488776.889:158): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AA7F8EC696C7F728D9CBCE7CC29B047B7865D1CD970ED3359DB6D8EE9D63E983A pid=8813 comm="syz.0.1250" [ 386.256512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.292972][ T8405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.327476][ T8405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.336398][ T8405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.351960][ T8405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.565631][ T7212] tipc: Left network mode [ 386.667938][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.726539][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.740811][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 386.755765][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.900385][ T8811] loop4: detected capacity change from 0 to 32768 [ 386.965659][ T3889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.974079][ T3889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.984372][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 386.993818][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.002520][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.009673][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.010155][ T8811] XFS (loop4): Mounting V5 Filesystem [ 387.024256][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.033153][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.049344][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.056518][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.066565][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.074899][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.135898][ T8811] XFS (loop4): Ending clean mount [ 387.146884][ T8811] XFS (loop4): Quotacheck needed: Please wait. [ 387.207980][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.242074][ T8811] XFS (loop4): Quotacheck: Done. [ 387.320980][ T7348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.342289][ T7348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.460120][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.493133][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.116147][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.125359][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.143501][ T8651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.162563][ T8651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.164486][ T7623] XFS (loop4): Unmounting Filesystem [ 388.288793][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.300474][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.310214][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.319910][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.328736][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.337700][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.348626][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.555319][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.610903][ T8865] loop2: detected capacity change from 0 to 8 [ 388.984576][ T26] audit: type=1800 audit(1722488779.619:159): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1255" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 389.172278][ T8877] loop4: detected capacity change from 0 to 2048 [ 389.229812][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.255535][ T8877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 389.276560][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.284076][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.325234][ T26] audit: type=1800 audit(1722488779.969:160): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1254" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 389.413036][ T7623] EXT4-fs (loop4): unmounting filesystem. [ 389.452748][ T26] audit: type=1400 audit(1722488780.089:161): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AA7F8EC696C7F728D9CBCE7CC29B047B7865D1CD970ED3359DB6D8EE9D63E983A pid=8883 comm="syz.2.1259" [ 389.562655][ T8888] program syz.4.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.603550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.621206][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.643583][ T8876] loop0: detected capacity change from 0 to 40427 [ 389.695632][ T8876] F2FS-fs (loop0): invalid crc value [ 389.730038][ T8876] F2FS-fs (loop0): Found nat_bits in checkpoint [ 389.741881][ T8651] device veth0_vlan entered promiscuous mode [ 389.755535][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.766031][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.799928][ T8651] device veth1_vlan entered promiscuous mode [ 389.828814][ T8690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.841428][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.855633][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.873799][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.915103][ T8876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 390.191768][ T8690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.214138][ T8690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.262458][ T8651] device veth0_macvtap entered promiscuous mode [ 390.351771][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.379980][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.410690][ T8911] loop4: detected capacity change from 0 to 512 [ 390.412751][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.458462][ T8690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.516088][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.562679][ T8916] loop2: detected capacity change from 0 to 8 [ 390.589330][ T8911] EXT4-fs (loop4): 1 orphan inode deleted [ 390.603368][ T8911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 390.633996][ T8911] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038 (0x7fffffff) [ 390.836111][ T8651] device veth1_macvtap entered promiscuous mode [ 390.869261][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.897431][ T26] audit: type=1800 audit(1722488781.519:162): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1267" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 390.964250][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.989776][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.246439][ T8922] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 391.254146][ T8922] EXT4-fs warning (device loop4): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 391.332742][ T26] audit: type=1804 audit(1722488781.959:163): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1266" name="/newroot/82/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 391.432770][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.594678][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.611802][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.621935][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.647563][ T8907] loop0: detected capacity change from 0 to 32768 [ 391.655561][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.690501][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.695234][ T8907] XFS (loop0): Mounting V5 Filesystem [ 391.703396][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.736403][ T26] audit: type=1804 audit(1722488782.369:164): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1266" name="/newroot/82/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 391.757521][ T26] audit: type=1804 audit(1722488782.369:165): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1266" name="/newroot/82/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 391.809174][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.823571][ T7623] EXT4-fs (loop4): unmounting filesystem. [ 391.856110][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 391.864284][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.892852][ T8937] loop2: detected capacity change from 0 to 64 [ 391.954449][ T8907] XFS (loop0): Starting recovery (logdev: internal) [ 391.957603][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.987556][ T26] audit: type=1400 audit(1722488782.629:166): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AA7F8EC696C7F728D9CBCE7CC29B047B7865D1CD970ED3359DB6D8EE9D63E983A pid=8938 comm="syz.4.1269" [ 392.047376][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.071989][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.092710][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.095594][ T8907] XFS (loop0): Ending recovery (logdev: internal) [ 392.104254][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.119806][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.138671][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.159657][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.159680][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.159696][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.159709][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.173909][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.428953][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 392.437546][ T8947] loop2: detected capacity change from 0 to 256 [ 392.438282][ T6390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.522498][ T8948] loop4: detected capacity change from 0 to 128 [ 393.146924][ T8651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.160975][ T8651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.170364][ T8651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.179607][ T8651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.185220][ T8947] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 393.333255][ T7853] XFS (loop0): Unmounting Filesystem [ 393.682932][ T7212] device hsr_slave_0 left promiscuous mode [ 393.691591][ T7212] device hsr_slave_1 left promiscuous mode [ 393.707465][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.721851][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.731333][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.747719][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.760449][ T7212] device bridge_slave_1 left promiscuous mode [ 393.770673][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.784452][ T7212] device bridge_slave_0 left promiscuous mode [ 393.794204][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.819493][ T7212] device hsr_slave_0 left promiscuous mode [ 393.854972][ T7212] device hsr_slave_1 left promiscuous mode [ 393.861625][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.870352][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.870422][ T8962] loop0: detected capacity change from 0 to 256 [ 393.885052][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.892601][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.908764][ T7212] device bridge_slave_1 left promiscuous mode [ 393.923017][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.940569][ T7212] device bridge_slave_0 left promiscuous mode [ 393.954232][ T8962] 9pnet_virtio: no channels available for device @ [ 393.957759][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.037581][ T7212] device veth1_macvtap left promiscuous mode [ 394.044184][ T7212] device veth0_macvtap left promiscuous mode [ 394.056710][ T7212] device veth1_vlan left promiscuous mode [ 394.062828][ T7212] device veth0_vlan left promiscuous mode [ 394.080107][ T7212] device veth1_macvtap left promiscuous mode [ 394.092194][ T7212] device veth0_macvtap left promiscuous mode [ 394.102568][ T7212] device veth1_vlan left promiscuous mode [ 394.119394][ T7212] device veth0_vlan left promiscuous mode [ 394.735946][ T8970] loop2: detected capacity change from 0 to 64 [ 395.249721][ T8978] loop2: detected capacity change from 0 to 256 [ 395.254262][ T8972] loop0: detected capacity change from 0 to 32768 [ 395.283907][ T8978] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 395.365761][ T8972] XFS (loop0): Mounting V5 Filesystem [ 395.433898][ T8972] XFS (loop0): Ending clean mount [ 395.456157][ T8972] XFS (loop0): Quotacheck needed: Please wait. [ 395.630087][ T8972] XFS (loop0): Quotacheck: Done. [ 395.773424][ T7212] team0 (unregistering): Port device team_slave_1 removed [ 395.865845][ T7212] team0 (unregistering): Port device team_slave_0 removed [ 396.386145][ T7212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.494916][ T7212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.516126][ T7853] XFS (loop0): Unmounting Filesystem [ 397.228237][ T7212] bond0 (unregistering): Released all slaves [ 397.742872][ T7212] team0 (unregistering): Port device team_slave_1 removed [ 397.790003][ T7212] team0 (unregistering): Port device team_slave_0 removed [ 397.845856][ T7212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.894754][ T7212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.415852][ T7212] bond0 (unregistering): Released all slaves [ 398.527305][ T8995] device vlan2 entered promiscuous mode [ 398.533264][ T8995] device dummy0 entered promiscuous mode [ 398.564419][ T8995] team0: Port device vlan2 added [ 398.580290][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.627065][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.663495][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.685608][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.696837][ T4849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.734288][ T4849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.748595][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.772502][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.776529][ T8999] loop0: detected capacity change from 0 to 256 [ 398.819376][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.826542][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.872360][ T9001] loop2: detected capacity change from 0 to 2048 [ 398.895655][ T9003] loop4: detected capacity change from 0 to 256 [ 398.905681][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.917114][ T8999] 9pnet_virtio: no channels available for device @ [ 398.928537][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.942186][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.953706][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.963757][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.970921][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.971186][ T8423] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.000417][ T9003] FAT-fs (loop4): Directory bread(block 64) failed [ 399.019393][ T9003] FAT-fs (loop4): Directory bread(block 65) failed [ 399.028603][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.042103][ T9003] FAT-fs (loop4): Directory bread(block 66) failed [ 399.051845][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.066578][ T9003] FAT-fs (loop4): Directory bread(block 67) failed [ 399.074237][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.092179][ T9003] FAT-fs (loop4): Directory bread(block 68) failed [ 399.104414][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.117037][ T9003] FAT-fs (loop4): Directory bread(block 69) failed [ 399.123800][ T9003] FAT-fs (loop4): Directory bread(block 70) failed [ 399.155962][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.168028][ T9003] FAT-fs (loop4): Directory bread(block 71) failed [ 399.175096][ T9003] FAT-fs (loop4): Directory bread(block 72) failed [ 399.181664][ T9003] FAT-fs (loop4): Directory bread(block 73) failed [ 399.187603][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.208672][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.211290][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.233109][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.242099][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.889431][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.898776][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.917426][ T8690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.957467][ T8690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.995388][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 400.003982][ T9009] loop2: detected capacity change from 0 to 64 [ 400.004393][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.959186][ T9031] loop4: detected capacity change from 0 to 8 [ 401.028274][ T9035] loop0: detected capacity change from 0 to 256 [ 401.093771][ T9031] SQUASHFS error: xz decompression failed, data probably corrupt [ 401.129095][ T9031] SQUASHFS error: Failed to read block 0x108: -5 [ 401.148431][ T9031] SQUASHFS error: Unable to read metadata cache entry [106] [ 401.163906][ T9031] SQUASHFS error: Unable to read inode 0x7ff [ 401.168418][ T9035] FAT-fs (loop0): Directory bread(block 64) failed [ 401.181944][ T9035] FAT-fs (loop0): Directory bread(block 65) failed [ 401.184960][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.189214][ T9035] FAT-fs (loop0): Directory bread(block 66) failed [ 401.224675][ T9035] FAT-fs (loop0): Directory bread(block 67) failed [ 401.232287][ T9035] FAT-fs (loop0): Directory bread(block 68) failed [ 401.234935][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.251668][ T9035] FAT-fs (loop0): Directory bread(block 69) failed [ 401.283877][ T9035] FAT-fs (loop0): Directory bread(block 70) failed [ 401.309163][ T9035] FAT-fs (loop0): Directory bread(block 71) failed [ 401.318125][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.355191][ T9035] FAT-fs (loop0): Directory bread(block 72) failed [ 401.372050][ T9035] FAT-fs (loop0): Directory bread(block 73) failed [ 401.389494][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.411404][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.498360][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.521700][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.543285][ T8690] device veth0_vlan entered promiscuous mode [ 401.552120][ T9041] loop2: detected capacity change from 0 to 4096 [ 401.564476][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.572582][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.608251][ T8690] device veth1_vlan entered promiscuous mode [ 401.634610][ T9041] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 401.736366][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.762617][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 401.795583][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.804321][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.147589][ T8690] device veth0_macvtap entered promiscuous mode [ 402.287043][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 402.309934][ T8690] device veth1_macvtap entered promiscuous mode [ 402.378740][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.414752][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.478455][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.507587][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.530781][ T9028] loop1: detected capacity change from 0 to 32768 [ 402.567533][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.594557][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.614275][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.642305][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.654305][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.664164][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.674363][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.686088][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.700680][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.711439][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.723176][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.739070][ T9028] XFS (loop1): Mounting V5 Filesystem [ 402.746601][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.758223][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.768516][ T8690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.779780][ T8690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.796232][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.807274][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 402.816823][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.821874][ T9028] XFS (loop1): Starting recovery (logdev: internal) [ 402.836821][ T8690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.855209][ T8690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.874265][ T8690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.927034][ T8690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.952336][ T9028] XFS (loop1): Ending recovery (logdev: internal) [ 403.013279][ T9074] loop2: detected capacity change from 0 to 256 [ 403.151599][ T9074] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 403.215966][ T7348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.218713][ T9078] loop4: detected capacity change from 0 to 512 [ 403.224367][ T7348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.270630][ T8651] XFS (loop1): Unmounting Filesystem [ 403.303071][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.353355][ T4141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.397391][ T4141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.410066][ T9082] loop0: detected capacity change from 0 to 256 [ 403.418724][ T9078] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1314: invalid indirect mapped block 4294967295 (level 1) [ 403.424558][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.564198][ T9082] FAT-fs (loop0): Directory bread(block 64) failed [ 403.614021][ T9082] FAT-fs (loop0): Directory bread(block 65) failed [ 403.614634][ T9078] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1314: invalid indirect mapped block 4294967295 (level 1) [ 403.630016][ T9082] FAT-fs (loop0): Directory bread(block 66) failed [ 403.654982][ T9082] FAT-fs (loop0): Directory bread(block 67) failed [ 403.675021][ T9082] FAT-fs (loop0): Directory bread(block 68) failed [ 403.685041][ T9082] FAT-fs (loop0): Directory bread(block 69) failed [ 403.685287][ T9078] EXT4-fs (loop4): 2 truncates cleaned up [ 403.691686][ T9082] FAT-fs (loop0): Directory bread(block 70) failed [ 403.724713][ T9078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 403.759029][ T9082] FAT-fs (loop0): Directory bread(block 71) failed [ 403.785958][ T9082] FAT-fs (loop0): Directory bread(block 72) failed [ 403.832293][ T9082] FAT-fs (loop0): Directory bread(block 73) failed [ 404.737460][ T7623] EXT4-fs error (device loop4): ext4_lookup:1855: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 404.844764][ T7623] EXT4-fs error (device loop4): ext4_lookup:1855: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 405.017706][ T9106] loop1: detected capacity change from 0 to 4096 [ 405.045990][ T9106] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 405.336886][ T7623] EXT4-fs (loop4): unmounting filesystem. [ 405.557451][ T9119] loop1: detected capacity change from 0 to 256 [ 405.609966][ T9119] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 406.697696][ T9141] loop0: detected capacity change from 0 to 4096 [ 406.766392][ T9141] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 406.912067][ T3649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.926900][ T3649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.937489][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.946825][ T3649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.954434][ T3649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 406.963654][ T3649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.223385][ T9164] loop3: detected capacity change from 0 to 256 [ 407.286309][ T9164] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 407.482087][ T7212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.511207][ T9150] chnl_net:caif_netlink_parms(): no params data found [ 407.630692][ T153] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.641069][ T7212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.790625][ T7212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.884613][ T153] usb 3-1: Using ep0 maxpacket: 16 [ 407.900108][ T9182] IPVS: Error joining to the multicast group [ 408.013131][ T7212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.030298][ T153] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.046329][ T153] usb 3-1: config 1 has no interface number 1 [ 408.052480][ T153] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.065473][ T153] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.167634][ T9189] loop3: detected capacity change from 0 to 4096 [ 408.176056][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.183273][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.185357][ T9189] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 408.249549][ T9150] device bridge_slave_0 entered promiscuous mode [ 408.264885][ T153] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.288933][ T153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.310087][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.342229][ T153] usb 3-1: Product: syz [ 408.350896][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.353871][ T153] usb 3-1: Manufacturer: syz [ 408.374686][ T9150] device bridge_slave_1 entered promiscuous mode [ 408.377321][ T153] usb 3-1: SerialNumber: syz [ 408.411854][ T9195] loop0: detected capacity change from 0 to 1024 [ 408.426907][ T9195] EXT4-fs (loop0): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 408.478740][ T7987] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.491454][ T9195] loop0: detected capacity change from 0 to 256 [ 408.549851][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.559079][ T9195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x207d53fc, utbl_chksum : 0xe619d30d) [ 408.589715][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.675116][ T4210] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 408.736677][ T153] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 408.753001][ T9150] team0: Port device team_slave_0 added [ 408.769053][ T153] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 408.780429][ T153] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 408.792049][ T9150] team0: Port device team_slave_1 added [ 408.800064][ T153] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 408.847025][ T7212] tipc: Left network mode [ 408.888725][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.912541][ T153] usb 3-1: USB disconnect, device number 8 [ 408.944725][ T4210] usb 2-1: Using ep0 maxpacket: 16 [ 408.950213][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.023875][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.052091][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.057932][ T9207] loop0: detected capacity change from 0 to 1024 [ 409.065100][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.097650][ T3649] Bluetooth: hci4: command tx timeout [ 409.142968][ T9207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 409.206865][ T8108] udevd[8108]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.256508][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.274951][ T4210] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 409.296920][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.338006][ T4210] usb 2-1: Product: syz [ 409.342261][ T4210] usb 2-1: Manufacturer: syz [ 409.372088][ T4210] usb 2-1: SerialNumber: syz [ 409.388800][ T4210] usb 2-1: config 0 descriptor?? [ 409.433616][ T4210] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 409.450492][ T4210] dvb-usb: bulk message failed: -22 (2/0) [ 409.466303][ T4210] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 409.524868][ T4210] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 409.552019][ T4210] usb 2-1: media controller created [ 409.572294][ T4210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.596578][ T9222] IPVS: Error joining to the multicast group [ 409.679926][ T4210] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 409.711921][ T4210] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 409.815948][ T7853] EXT4-fs (loop0): unmounting filesystem. [ 409.818493][ T9150] device hsr_slave_0 entered promiscuous mode [ 409.840400][ T9150] device hsr_slave_1 entered promiscuous mode [ 409.863758][ T9234] loop3: detected capacity change from 0 to 1024 [ 409.883643][ T9150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.903300][ T9150] Cannot create hsr debugfs directory [ 409.929757][ T9234] EXT4-fs (loop3): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 410.054600][ T4210] rc_core: IR keymap rc-dtt200u not found [ 410.060470][ T4210] Registered IR keymap rc-empty [ 410.071272][ T4210] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 410.090375][ T9234] loop3: detected capacity change from 0 to 256 [ 410.121469][ T4210] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input19 [ 410.152185][ T9234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x207d53fc, utbl_chksum : 0xe619d30d) [ 410.152546][ T4210] dvb-usb: schedule remote query interval to 300 msecs. [ 410.240063][ T4210] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 410.299606][ T4210] usb 2-1: USB disconnect, device number 17 [ 410.435769][ T4210] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 411.084663][ T6393] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 411.155399][ T3649] Bluetooth: hci4: command tx timeout [ 411.248954][ T9272] loop1: detected capacity change from 0 to 1024 [ 411.268908][ T9272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 411.324564][ T6393] usb 4-1: Using ep0 maxpacket: 16 [ 411.387143][ T9248] loop0: detected capacity change from 0 to 32768 [ 411.444795][ T6393] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 411.484236][ T6393] usb 4-1: config 1 has no interface number 1 [ 411.491169][ T6393] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 411.504428][ T6393] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.523044][ T9248] XFS (loop0): Mounting V5 Filesystem [ 411.554289][ T8651] EXT4-fs (loop1): unmounting filesystem. [ 411.686058][ T6393] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.722130][ T6393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.749041][ T9291] loop1: detected capacity change from 0 to 4096 [ 411.763390][ T9291] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 411.764673][ T6393] usb 4-1: Product: syz [ 411.780200][ T9292] loop2: detected capacity change from 0 to 1024 [ 411.793063][ T6393] usb 4-1: Manufacturer: syz [ 411.798325][ T6393] usb 4-1: SerialNumber: syz [ 411.813367][ T9248] XFS (loop0): Ending clean mount [ 411.819816][ T9292] EXT4-fs (loop2): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 411.849891][ T26] audit: type=1800 audit(1722488802.489:167): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1379" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 411.851484][ T9291] ntfs3: loop1: ino=21, "bus" fallocate(0x11) is not supported [ 411.977557][ T7853] XFS (loop0): Unmounting Filesystem [ 411.984079][ T9292] loop2: detected capacity change from 0 to 256 [ 412.065634][ T9292] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x207d53fc, utbl_chksum : 0xe619d30d) [ 412.110908][ T7212] device hsr_slave_0 left promiscuous mode [ 412.149501][ T7212] device hsr_slave_1 left promiscuous mode [ 412.154788][ T6393] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 412.168126][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.168206][ T6393] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 412.186598][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.241120][ T6393] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 412.250333][ T6393] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 412.265902][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.283722][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.325259][ T7212] device bridge_slave_1 left promiscuous mode [ 412.331520][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.348182][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 412.358032][ T6393] usb 4-1: USB disconnect, device number 13 [ 412.444874][ T7212] device bridge_slave_0 left promiscuous mode [ 412.461412][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.567060][ T7212] device veth1_macvtap left promiscuous mode [ 412.573159][ T7212] device veth0_macvtap left promiscuous mode [ 412.600558][ T7212] device veth1_vlan left promiscuous mode [ 412.618966][ T7212] device veth0_vlan left promiscuous mode [ 412.704533][ T9319] loop1: detected capacity change from 0 to 1024 [ 412.748971][ T9319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 412.821905][ T9325] Bluetooth: MGMT ver 1.22 [ 412.850065][ T9325] ALSA: seq fatal error: cannot create timer (-22) [ 412.867886][ T9327] loop3: detected capacity change from 0 to 128 [ 412.959780][ T9325] loop0: detected capacity change from 0 to 2048 [ 413.011550][ T9325] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 413.062097][ T9325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.239326][ T3637] Bluetooth: hci4: command tx timeout [ 413.357667][ T8690] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 413.366343][ T8690] FAT-fs (loop3): Filesystem has been set read-only [ 413.373955][ T8690] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 413.421696][ T9329] loop2: detected capacity change from 0 to 32768 [ 413.671473][ T9329] XFS (loop2): Mounting V5 Filesystem [ 413.877260][ T9329] XFS (loop2): Ending clean mount [ 414.170653][ T8405] XFS (loop2): Unmounting Filesystem [ 414.538514][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 414.589570][ T7212] team0 (unregistering): Port device team_slave_1 removed [ 414.652740][ T7212] team0 (unregistering): Port device team_slave_0 removed [ 414.713735][ T7212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.765553][ T6390] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 414.775505][ T7212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.050185][ T6393] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 415.124760][ T6390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.140545][ T6390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.150946][ T6390] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.164401][ T6390] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.173572][ T6390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.194645][ T6390] usb 1-1: config 0 descriptor?? [ 415.310326][ T6393] usb 3-1: Using ep0 maxpacket: 16 [ 415.315670][ T3637] Bluetooth: hci4: command tx timeout [ 415.333127][ T7212] bond0 (unregistering): Released all slaves [ 415.436944][ T6393] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 415.459326][ T6393] usb 3-1: config 1 has no interface number 1 [ 415.474886][ T6393] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 415.488199][ T6393] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.503469][ T8651] EXT4-fs (loop1): unmounting filesystem. [ 415.574397][ T9150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.611937][ T9150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.631668][ T9150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.654803][ T6393] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.667978][ T9150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.684956][ T6393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.696880][ T6390] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 415.722145][ T6393] usb 3-1: Product: syz [ 415.733554][ T6390] plantronics 0003:047F:FFFF.0007: parse failed [ 415.743186][ T6393] usb 3-1: Manufacturer: syz [ 415.758062][ T6390] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 415.774657][ T6393] usb 3-1: SerialNumber: syz [ 415.933552][ T6390] usb 1-1: USB disconnect, device number 22 [ 415.959680][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.000622][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.015924][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.039893][ T9150] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.094719][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.104658][ T6842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 416.125096][ T6393] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 416.125564][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.138767][ T6393] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 416.151333][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.158516][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.179787][ T6393] usb 3-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 416.219611][ T6393] usb 3-1: found format II with max.bitrate = 0, frame size=0 [ 416.224652][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.255649][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.288291][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.315063][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.322235][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.348896][ T6393] usb 3-1: USB disconnect, device number 9 [ 416.360535][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.405914][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 416.444278][ T9150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.510579][ T9150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.524267][ T6842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 416.560591][ T6842] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 416.577774][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.632184][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.654152][ T6842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.677067][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.684123][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.693196][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.703221][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.711340][ T3646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.713148][ T9377] loop2: detected capacity change from 0 to 64 [ 416.725260][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 416.734572][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.748848][ T6842] usb 2-1: config 0 descriptor?? [ 416.756289][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.772684][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.791857][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.802718][ T8627] udevd[8627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.820565][ T6842] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 416.828906][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.839736][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.893943][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.902820][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.015842][ T6842] usb 2-1: USB disconnect, device number 18 [ 417.252610][ T8627] udevd[8627]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.350522][ T9387] loop2: detected capacity change from 0 to 512 [ 417.646530][ T9387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 417.660935][ T9387] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038 (0x7fffffff) [ 417.739791][ T9387] EXT4-fs: Cannot specify journal on remount [ 417.785353][ T9401] loop1: detected capacity change from 0 to 2048 [ 417.840990][ T9401] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.907634][ T9372] chnl_net:caif_netlink_parms(): no params data found [ 417.984930][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.992475][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.011139][ T8405] EXT4-fs (loop2): unmounting filesystem. [ 418.110053][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.161925][ T9375] loop0: detected capacity change from 0 to 32768 [ 418.304835][ T9375] XFS (loop0): Mounting V5 Filesystem [ 418.404274][ T9375] XFS (loop0): Ending clean mount [ 418.637208][ T7853] XFS (loop0): Unmounting Filesystem [ 418.699065][ T9431] loop2: detected capacity change from 0 to 512 [ 418.709785][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.726678][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.836658][ T3646] Bluetooth: hci3: command tx timeout [ 418.968856][ T9372] device bridge_slave_0 entered promiscuous mode [ 419.021403][ T9431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 419.238851][ T9431] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 419.252101][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.334729][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.342907][ T9372] device bridge_slave_1 entered promiscuous mode [ 419.496276][ T9372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.521822][ T8405] EXT4-fs (loop2): unmounting filesystem. [ 419.537197][ T9372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.706690][ T9372] team0: Port device team_slave_0 added [ 419.736309][ T9372] team0: Port device team_slave_1 added [ 419.774905][ T3677] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 419.893025][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.905015][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.961627][ T9372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.971981][ T9447] loop0: detected capacity change from 0 to 4096 [ 419.981793][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.995746][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 420.025339][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.032308][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.033807][ T3677] usb 2-1: Using ep0 maxpacket: 16 [ 420.068083][ T9447] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 420.080735][ T9372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.118854][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.129041][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.158058][ T9150] device veth0_vlan entered promiscuous mode [ 420.175741][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.196946][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.214789][ T3677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 420.232956][ T3677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 420.257749][ T9447] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 420.264448][ T3677] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 420.274600][ T3677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.308022][ T3677] usb 2-1: config 0 descriptor?? [ 420.334562][ T9372] device hsr_slave_0 entered promiscuous mode [ 420.360014][ T9372] device hsr_slave_1 entered promiscuous mode [ 420.382681][ T9150] device veth1_vlan entered promiscuous mode [ 420.398384][ T7853] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 420.443205][ T7853] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 420.453045][ T7853] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 420.495482][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 420.504105][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 420.549619][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.580833][ T9445] loop2: detected capacity change from 0 to 32768 [ 420.588328][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.599405][ T9445] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.1414 (9445) [ 420.601868][ T9150] device veth0_macvtap entered promiscuous mode [ 420.621141][ T9445] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 420.628951][ T9150] device veth1_macvtap entered promiscuous mode [ 420.669304][ T9445] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 420.706090][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.717603][ T9445] BTRFS info (device loop2): using free space tree [ 420.736118][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.747059][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.763104][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.794665][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.805752][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.815714][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.826972][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.843501][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.857351][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.870739][ T9455] loop0: detected capacity change from 0 to 4096 [ 420.878634][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.889484][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 420.898975][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.908157][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.914746][ T3646] Bluetooth: hci3: command tx timeout [ 420.917577][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.962398][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.975315][ T3677] hid (null): report_id 0 is invalid [ 420.980854][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.990325][ T3677] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 421.006588][ T9455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.020952][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.044942][ T3677] hid-generic 0003:0158:0100.0008: unexpected long global item [ 421.055325][ T3677] hid-generic: probe of 0003:0158:0100.0008 failed with error -22 [ 421.070236][ T9445] BTRFS info (device loop2): enabling ssd optimizations [ 421.080964][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.090994][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.104549][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.115029][ T9150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.125801][ T9150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.138579][ T9150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.151587][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.156759][ T7853] EXT4-fs (loop0): unmounting filesystem. [ 421.161534][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.187174][ T9150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.206260][ T9150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.251401][ T9150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.279261][ T9150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.406297][ T6395] usb 2-1: USB disconnect, device number 19 [ 421.480550][ T26] audit: type=1804 audit(1722488812.119:168): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1414" name="/newroot/50/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 421.534289][ T9372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.550357][ T9478] loop0: detected capacity change from 0 to 512 [ 421.672893][ T9478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.683866][ T8405] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 421.702078][ T9478] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038 (0x7fffffff) [ 421.742383][ T9372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.758340][ T7348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.796568][ T9478] EXT4-fs: Cannot specify journal on remount [ 421.853938][ T7348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.060271][ T9372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.071416][ T7853] EXT4-fs (loop0): unmounting filesystem. [ 422.096158][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 422.158425][ T4141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.191381][ T4141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.217085][ T9372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.455693][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.996456][ T3646] Bluetooth: hci3: command tx timeout [ 423.191493][ T6276] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 424.062342][ T9502] loop4: detected capacity change from 0 to 1024 [ 424.087828][ T9502] EXT4-fs: Ignoring removed bh option [ 424.113533][ T9372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.154018][ T9502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 424.169528][ T9502] System zones: 0-1, 3-12 [ 424.179539][ T9506] loop2: detected capacity change from 0 to 512 [ 424.190679][ T9372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 424.225128][ T9502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 424.264804][ T6276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.284672][ T6276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.297087][ T9372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 424.304083][ T6276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.312172][ T9506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 424.334597][ T6276] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.343689][ T6276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.352678][ T9506] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 424.379225][ T6276] usb 2-1: config 0 descriptor?? [ 424.448390][ T9150] EXT4-fs (loop4): unmounting filesystem. [ 424.477685][ T9372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 424.560257][ T8405] EXT4-fs (loop2): unmounting filesystem. [ 424.719202][ T9515] loop4: detected capacity change from 0 to 2048 [ 424.737648][ T9498] loop0: detected capacity change from 0 to 40427 [ 424.760642][ T9498] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 424.778015][ T9498] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 424.812408][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.835248][ T9498] F2FS-fs (loop0): invalid crc value [ 424.842789][ T9515] Alternate GPT is invalid, using primary GPT. [ 424.864298][ T9515] loop4: p1 p2 p3 [ 424.883247][ T9498] F2FS-fs (loop0): Found nat_bits in checkpoint [ 424.895726][ T6276] plantronics 0003:047F:FFFF.0009: unbalanced collection at end of report description [ 424.918460][ T6276] plantronics 0003:047F:FFFF.0009: parse failed [ 424.924929][ T6276] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 425.148412][ T9522] loop2: detected capacity change from 0 to 1024 [ 425.397202][ T3646] Bluetooth: hci3: command tx timeout [ 425.411784][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.459899][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.465691][ T6393] usb 2-1: USB disconnect, device number 20 [ 425.519894][ T9372] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.581631][ T9498] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 425.590067][ T9498] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 425.600743][ T9523] Bluetooth: MGMT ver 1.22 [ 425.635043][ T9523] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 425.745240][ T7853] syz-executor: attempt to access beyond end of device [ 425.745240][ T7853] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 425.809036][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.824457][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.860943][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.862572][ T9526] loop4: detected capacity change from 0 to 1024 [ 425.868116][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.896000][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.918413][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.937412][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.944605][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.025637][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 426.033683][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.378897][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.459380][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.481890][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.507613][ T9542] loop1: detected capacity change from 0 to 512 [ 426.507753][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.565867][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.600217][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.623076][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.632605][ T9540] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 426.633045][ T9542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 426.650467][ T9540] device macvlan0 entered promiscuous mode [ 426.661007][ T9542] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 426.691906][ T9540] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 426.716911][ T7212] device hsr_slave_0 left promiscuous mode [ 426.744844][ T7212] device hsr_slave_1 left promiscuous mode [ 426.751435][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.785542][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.797791][ T9542] EXT4-fs: Cannot specify journal on remount [ 426.824399][ T9529] loop2: detected capacity change from 0 to 32768 [ 426.831603][ T7212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.840275][ T7212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.864380][ T7212] device bridge_slave_1 left promiscuous mode [ 426.871206][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.884871][ T6276] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 426.899593][ T7212] device bridge_slave_0 left promiscuous mode [ 426.912087][ T9529] XFS (loop2): Mounting V5 Filesystem [ 426.918190][ T8651] EXT4-fs (loop1): unmounting filesystem. [ 426.930067][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.985420][ T7212] device veth1_macvtap left promiscuous mode [ 426.991600][ T7212] device veth0_macvtap left promiscuous mode [ 427.020131][ T9529] XFS (loop2): Ending clean mount [ 427.030064][ T7212] device veth1_vlan left promiscuous mode [ 427.039541][ T7212] device veth0_vlan left promiscuous mode [ 427.047123][ T9529] XFS (loop2): Quotacheck needed: Please wait. [ 427.106977][ T9529] XFS (loop2): Quotacheck: Done. [ 427.282081][ T8405] XFS (loop2): Unmounting Filesystem [ 427.304161][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.321243][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.331362][ T6276] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 427.340812][ T6276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.361670][ T6276] usb 5-1: config 0 descriptor?? [ 427.500574][ T6392] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 427.660520][ T9546] kernel profiling enabled (shift: 9) [ 428.101680][ T9568] loop2: detected capacity change from 0 to 1024 [ 428.115595][ T6392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.261062][ T6392] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 428.321548][ T6392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.354840][ T3646] Bluetooth: hci3: command tx timeout [ 428.484662][ T6392] usb 2-1: config 0 descriptor?? [ 428.656694][ T6392] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 428.896057][ T6392] usb 2-1: USB disconnect, device number 21 [ 428.935909][ T9566] loop0: detected capacity change from 0 to 40427 [ 428.951886][ T9566] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 428.966601][ T9566] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 429.021199][ T9566] F2FS-fs (loop0): invalid crc value [ 429.035538][ T9566] F2FS-fs (loop0): Found nat_bits in checkpoint [ 429.096645][ T7212] team0 (unregistering): Port device team_slave_1 removed [ 429.105903][ T9566] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 429.113026][ T9566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 429.121097][ T6276] usb 5-1: string descriptor 0 read error: -71 [ 429.184724][ T6276] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 429.193586][ T6276] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 429.217824][ T6276] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 429.226737][ T6276] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 429.245102][ T6276] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 429.291014][ T7853] syz-executor: attempt to access beyond end of device [ 429.291014][ T7853] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 429.308482][ T7212] team0 (unregistering): Port device team_slave_0 removed [ 429.308695][ T6276] usb 5-1: USB disconnect, device number 17 [ 429.474187][ T7212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.597262][ T7212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.327357][ T7212] bond0 (unregistering): Released all slaves [ 430.419151][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.427584][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'. [ 430.447894][ T9586] device bridge_slave_1 left promiscuous mode [ 430.454224][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.468419][ T9586] bridge1: port 1(bridge_slave_1) entered blocking state [ 430.476329][ T9586] bridge1: port 1(bridge_slave_1) entered disabled state [ 430.484101][ T9586] device bridge_slave_1 entered promiscuous mode [ 430.493900][ T9587] netlink: 'syz.1.1447': attribute type 10 has an invalid length. [ 430.505264][ T9587] device macvlan0 entered promiscuous mode [ 430.521978][ T9587] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 430.641310][ T9372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.684238][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.695330][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.971699][ T9611] loop4: detected capacity change from 0 to 2048 [ 431.182878][ T9618] loop2: detected capacity change from 0 to 1024 [ 431.736037][ T9611] Alternate GPT is invalid, using primary GPT. [ 431.774098][ T9611] loop4: p1 p2 p3 [ 431.935275][ T9619] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 431.935612][ T9381] I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.944700][ T8423] I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.952418][ T9394] I/O error, dev loop4, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.981213][ T9626] loop2: detected capacity change from 0 to 512 [ 431.985306][ T9619] loop4: detected capacity change from 0 to 1024 [ 432.005441][ T8423] I/O error, dev loop4, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.022474][ T9381] I/O error, dev loop4, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 432.052159][ T8423] Buffer I/O error on dev loop4p2, logical block 8, async page read [ 432.084656][ T9381] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 432.109687][ T7348] hfsplus: b-tree write err: -5, ino 4 [ 432.124155][ T9626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.154159][ T9626] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff) [ 432.201040][ T9381] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.232104][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.240962][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.253560][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.277546][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.287170][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.364699][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.431511][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.753843][ T9394] udevd[9394]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 432.802207][ T9388] udevd[9388]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 433.131460][ T9372] device veth0_vlan entered promiscuous mode [ 433.135412][ T9381] udevd[9381]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 433.142688][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 433.175441][ T8405] EXT4-fs (loop2): unmounting filesystem. [ 433.337493][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.390626][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.500147][ T9372] device veth1_vlan entered promiscuous mode [ 433.519774][ T9648] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 433.566795][ T9648] device macvlan0 entered promiscuous mode [ 433.602005][ T9648] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 433.651784][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 433.688188][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.705442][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.738138][ T9372] device veth0_macvtap entered promiscuous mode [ 433.908568][ T9372] device veth1_macvtap entered promiscuous mode [ 434.345423][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.433563][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.661056][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.720830][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.803779][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.812994][ T9670] loop4: detected capacity change from 0 to 1024 [ 434.849820][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.895148][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.993439][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.034242][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.094597][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.189873][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.245279][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.280380][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.315708][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.346569][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.410040][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.421466][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 435.432668][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.472916][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.512814][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.544569][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.574606][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.586222][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.603459][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.635385][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.646393][ T9372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.685641][ T9372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.702809][ T9372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.747457][ T9372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.910308][ T9666] loop1: detected capacity change from 0 to 32768 [ 436.694010][ T9666] XFS (loop1): Mounting V5 Filesystem [ 436.849695][ T9710] loop2: detected capacity change from 0 to 1024 [ 436.885427][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.919166][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.994753][ T3637] Bluetooth: hci0: command 0x0406 tx timeout [ 437.111178][ T9666] XFS (loop1): Ending clean mount [ 437.320700][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.408135][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.435305][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.475961][ T9666] XFS (loop1): Quotacheck needed: Please wait. [ 437.575820][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.620263][ T9666] XFS (loop1): Quotacheck: Done. [ 437.918253][ T8651] XFS (loop1): Unmounting Filesystem [ 438.761608][ T9732] loop0: detected capacity change from 0 to 256 [ 438.820358][ T9732] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 440.037862][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.044448][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517077][ T9761] loop4: detected capacity change from 0 to 1024 [ 442.059841][ T9780] loop2: detected capacity change from 0 to 256 [ 442.206566][ T9780] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 442.855966][ T9759] loop3: detected capacity change from 0 to 32768 [ 444.838341][ T26] audit: type=1326 audit(1722488835.479:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.4.1512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70265773b9 code=0x0 [ 445.005089][ T9811] sctp: [Deprecated]: syz.4.1512 (pid 9811) Use of int in max_burst socket option. [ 445.005089][ T9811] Use struct sctp_assoc_value instead [ 446.732638][ T9837] loop2: detected capacity change from 0 to 512 [ 446.787335][ T9837] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 446.872371][ T9837] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1521: casefold flag without casefold feature [ 447.259472][ T9837] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1521: missing EA_INODE flag [ 447.588869][ T9837] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1521: error while reading EA inode 12 err=-117 [ 447.724915][ T9837] EXT4-fs (loop2): 1 orphan inode deleted [ 447.730953][ T9837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 447.772066][ T9849] loop3: detected capacity change from 0 to 512 [ 447.842077][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1526'. [ 447.865413][ T9849] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 447.919898][ T9851] device bridge_slave_1 left promiscuous mode [ 447.923749][ T9849] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1525: iget: bad i_size value: -67835469387268086 [ 447.941891][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.965391][ T9849] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1525: couldn't read orphan inode 15 (err -117) [ 447.982363][ T9851] bridge1: port 1(bridge_slave_1) entered blocking state [ 447.998197][ T9849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 448.015274][ T9851] bridge1: port 1(bridge_slave_1) entered disabled state [ 448.023469][ T9851] device bridge_slave_1 entered promiscuous mode [ 448.030550][ T9849] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 448.043318][ T8405] EXT4-fs (loop2): unmounting filesystem. [ 448.121377][ T9839] loop4: detected capacity change from 0 to 32768 [ 449.044915][ T9839] XFS (loop4): Mounting V5 Filesystem [ 449.082370][ T9876] device bridge2 entered promiscuous mode [ 449.158287][ T9372] EXT4-fs (loop3): unmounting filesystem. [ 449.239094][ T9839] XFS (loop4): Ending clean mount [ 449.293408][ T9839] XFS (loop4): Quotacheck needed: Please wait. [ 449.533474][ T9839] XFS (loop4): Quotacheck: Done. [ 450.375700][ T9890] loop3: detected capacity change from 0 to 256 [ 450.382075][ T9150] XFS (loop4): Unmounting Filesystem [ 450.441261][ T9890] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 450.600207][ T9894] loop2: detected capacity change from 0 to 64 [ 450.653741][ T9894] hfs: get root inode failed [ 450.986432][ T26] audit: type=1326 audit(1722488841.629:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.2.1537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0249773b9 code=0x0 [ 451.182225][ T9908] sctp: [Deprecated]: syz.2.1537 (pid 9908) Use of int in max_burst socket option. [ 451.182225][ T9908] Use struct sctp_assoc_value instead [ 451.200219][ T9911] loop4: detected capacity change from 0 to 1024 [ 451.455407][ T9919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 451.468456][ T9919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.476735][ T9919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.009041][ T9930] loop2: detected capacity change from 0 to 256 [ 453.052270][ T9930] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 453.205904][ T9935] device bridge1 entered promiscuous mode [ 453.293074][ T9942] loop1: detected capacity change from 0 to 64 [ 453.343013][ T9942] hfs: get root inode failed [ 453.401741][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 454.707519][ T9961] loop1: detected capacity change from 0 to 512 [ 454.765000][ T9961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 454.804634][ T9963] loop3: detected capacity change from 0 to 1024 [ 454.976013][ T9961] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1554: casefold flag without casefold feature [ 455.090574][ T9971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.107699][ T9971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.115737][ T9971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.950572][ T9961] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1554: missing EA_INODE flag [ 456.201126][ T9961] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1554: error while reading EA inode 12 err=-117 [ 456.216353][ T9961] EXT4-fs (loop1): 1 orphan inode deleted [ 456.225893][ T9961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 458.031650][ T8651] EXT4-fs (loop1): unmounting filesystem. [ 458.096703][ T9997] loop4: detected capacity change from 0 to 512 [ 458.155303][ T9997] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 458.230660][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 458.270732][T10009] loop0: detected capacity change from 0 to 64 [ 458.286226][ T9997] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1563: iget: bad i_size value: -67835469387268086 [ 458.377945][ T9997] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1563: couldn't read orphan inode 15 (err -117) [ 458.481352][ T9997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 458.495137][T10009] Trying to free block not in datazone [ 458.515421][T10009] Trying to free block not in datazone [ 458.540071][ T9997] ext2 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 458.611310][T10017] loop1: detected capacity change from 0 to 1024 [ 458.763549][T10019] overlayfs: unrecognized mount option "\./file0" or missing value [ 459.339740][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 459.354441][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.370504][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.592501][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. [ 460.615745][T10029] netlink: 'syz.0.1572': attribute type 6 has an invalid length. [ 460.840289][ T9150] EXT4-fs (loop4): unmounting filesystem. [ 461.840965][T10058] loop4: detected capacity change from 0 to 64 [ 461.958508][T10058] Trying to free block not in datazone [ 461.973773][T10065] overlayfs: unrecognized mount option "\./file0" or missing value [ 462.002444][T10062] loop1: detected capacity change from 0 to 1024 [ 462.107458][T10058] Trying to free block not in datazone [ 462.256963][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.269243][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.277130][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.358265][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 463.511374][T10077] loop1: detected capacity change from 0 to 512 [ 463.570787][T10077] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 463.608721][T10077] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1588: iget: bad i_size value: -67835469387268086 [ 463.624929][T10077] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1588: couldn't read orphan inode 15 (err -117) [ 463.644251][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 463.658651][T10077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 463.688429][T10077] ext2 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 463.723085][T10089] netlink: 'syz.4.1591': attribute type 6 has an invalid length. [ 464.800542][ T8651] EXT4-fs (loop1): unmounting filesystem. [ 464.950715][T10113] overlayfs: unrecognized mount option "\./file0" or missing value [ 464.978336][T10110] loop4: detected capacity change from 0 to 1024 [ 465.249794][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.266231][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.274730][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.527137][T10122] loop0: detected capacity change from 0 to 64 [ 466.645967][T10122] Trying to free block not in datazone [ 466.677865][T10122] Trying to free block not in datazone [ 466.837735][T10126] device bridge1 entered promiscuous mode [ 466.856399][T10137] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 466.864235][T10137] #PF: supervisor instruction fetch in kernel mode [ 466.870729][T10137] #PF: error_code(0x0010) - not-present page [ 466.876724][T10137] PGD 59e96067 P4D 59e96067 PUD 55bd8067 PMD 0 [ 466.882998][T10137] Oops: 0010 [#1] PREEMPT SMP KASAN [ 466.888181][T10137] CPU: 0 PID: 10137 Comm: syz.1.1609 Not tainted 6.1.102-syzkaller #0 [ 466.896316][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 466.906361][T10137] RIP: 0010:0x0 [ 466.909812][T10137] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 466.917161][T10137] RSP: 0018:ffffc90004807158 EFLAGS: 00010246 [ 466.923211][T10137] RAX: 1ffffffff1725243 RBX: ffffffff8b929218 RCX: 0000000000000000 [ 466.931171][T10137] RDX: ffffc90004807200 RSI: 0000000000000001 RDI: ffff8880783a4000 [ 466.939129][T10137] RBP: ffffc900048072d0 R08: ffffffff85aad541 R09: ffffed100f074808 [ 466.947087][T10137] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 466.955054][T10137] R13: ffff8880783a4000 R14: ffffc90004807238 R15: ffffc90004807238 [ 466.963017][T10137] FS: 00007fd55f00d6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 466.971936][T10137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.978513][T10137] CR2: ffffffffffffffd6 CR3: 0000000027802000 CR4: 00000000003526f0 [ 466.986492][T10137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.994465][T10137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.002438][T10137] Call Trace: [ 467.005706][T10137] [ 467.008621][T10137] ? __die_body+0x5e/0xa0 [ 467.012943][T10137] ? page_fault_oops+0x7fe/0xaa0 [ 467.017874][T10137] ? mark_lock+0x9a/0x340 [ 467.022196][T10137] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 467.027731][T10137] ? rcu_is_watching+0x11/0xb0 [ 467.032478][T10137] ? is_errata93+0xc0/0x240 [ 467.037056][T10137] ? exc_page_fault+0x3d1/0x620 [ 467.041892][T10137] ? asm_exc_page_fault+0x22/0x30 [ 467.046906][T10137] ? bond_get_slave_by_id+0x251/0x560 [ 467.052267][T10137] bond_xdp_xmit+0x3fd/0x650 [ 467.056846][T10137] ? bond_xdp_xmit+0xa7/0x650 [ 467.061506][T10137] ? bond_xdp+0x950/0x950 [ 467.065846][T10137] bq_xmit_all+0xdb8/0x1210 [ 467.070335][T10137] ? __next_zones_zonelist+0x9e/0x130 [ 467.075693][T10137] ? __alloc_pages+0x770/0x770 [ 467.080444][T10137] ? prepare_alloc_pages+0x35b/0x5b0 [ 467.085713][T10137] ? rcu_is_watching+0x11/0xb0 [ 467.090462][T10137] ? __alloc_pages+0x36f/0x770 [ 467.095206][T10137] ? __dev_flush+0x1c0/0x1c0 [ 467.099782][T10137] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 467.106012][T10137] ? rcu_read_lock_bh_held+0x7a/0x110 [ 467.111370][T10137] bq_enqueue+0x324/0x3b0 [ 467.115684][T10137] dev_map_enqueue_multi+0xf8d/0x1100 [ 467.121039][T10137] ? dev_map_enqueue+0x340/0x340 [ 467.125954][T10137] ? memcpy+0x3c/0x60 [ 467.129921][T10137] ? trace_page_pool_state_hold+0xb6/0x280 [ 467.135710][T10137] xdp_do_redirect_frame+0x491/0x660 [ 467.140991][T10137] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 467.146346][T10137] ? __mutex_unlock_slowpath+0x218/0x750 [ 467.151965][T10137] ? 0xffffffffa0003b40 [ 467.156109][T10137] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 467.161638][T10137] ? xdp_convert_md_to_buff+0x330/0x330 [ 467.167162][T10137] ? bpf_dispatcher_change_prog+0xe0c/0xf90 [ 467.173046][T10137] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 467.179268][T10137] ? __might_fault+0xbd/0x110 [ 467.183930][T10137] ? _copy_from_user+0x109/0x170 [ 467.188852][T10137] ? bpf_test_init+0x15a/0x180 [ 467.193596][T10137] ? xdp_convert_md_to_buff+0x5b/0x330 [ 467.199038][T10137] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 467.204396][T10137] ? dev_put+0x80/0x80 [ 467.208446][T10137] ? dev_put+0x80/0x80 [ 467.212493][T10137] bpf_prog_test_run+0x32f/0x3a0 [ 467.217418][T10137] __sys_bpf+0x3eb/0x6c0 [ 467.221645][T10137] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 467.227001][T10137] ? print_irqtrace_events+0x210/0x210 [ 467.232444][T10137] ? print_irqtrace_events+0x210/0x210 [ 467.237888][T10137] ? syscall_enter_from_user_mode+0x2e/0x230 [ 467.243850][T10137] ? lockdep_hardirqs_on+0x94/0x130 [ 467.249026][T10137] __x64_sys_bpf+0x78/0x90 [ 467.253433][T10137] do_syscall_64+0x3b/0xb0 [ 467.257834][T10137] ? clear_bhb_loop+0x45/0xa0 [ 467.262499][T10137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.268376][T10137] RIP: 0033:0x7fd55e1773b9 [ 467.272777][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.292461][T10137] RSP: 002b:00007fd55f00d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.300877][T10137] RAX: ffffffffffffffda RBX: 00007fd55e305f80 RCX: 00007fd55e1773b9 [ 467.308928][T10137] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 467.316890][T10137] RBP: 00007fd55e1e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 467.324841][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.332791][T10137] R13: 000000000000000b R14: 00007fd55e305f80 R15: 00007ffdd7736068 [ 467.340923][T10137] [ 467.343922][T10137] Modules linked in: [ 467.347811][T10137] CR2: 0000000000000000 [ 467.351974][T10137] ---[ end trace 0000000000000000 ]--- [ 467.357415][T10137] RIP: 0010:0x0 [ 467.360876][T10137] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 467.368228][T10137] RSP: 0018:ffffc90004807158 EFLAGS: 00010246 [ 467.374278][T10137] RAX: 1ffffffff1725243 RBX: ffffffff8b929218 RCX: 0000000000000000 [ 467.382242][T10137] RDX: ffffc90004807200 RSI: 0000000000000001 RDI: ffff8880783a4000 [ 467.390197][T10137] RBP: ffffc900048072d0 R08: ffffffff85aad541 R09: ffffed100f074808 [ 467.398152][T10137] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 467.406106][T10137] R13: ffff8880783a4000 R14: ffffc90004807238 R15: ffffc90004807238 [ 467.414061][T10137] FS: 00007fd55f00d6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 467.422971][T10137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.429710][T10137] CR2: ffffffffffffffd6 CR3: 0000000027802000 CR4: 00000000003526f0 [ 467.437665][T10137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 467.445619][T10137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 467.453584][T10137] Kernel panic - not syncing: Fatal exception in interrupt [ 467.460902][T10137] Kernel Offset: disabled [ 467.465210][T10137] Rebooting in 86400 seconds..