last executing test programs: 1m26.72731899s ago: executing program 2 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 1m26.315042573s ago: executing program 2 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0x4) listen(r3, 0x0) 1m25.192044886s ago: executing program 2 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 1m25.134763001s ago: executing program 2 (id=92): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d392e87c4a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e0000000000000003ba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62157c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m25.04855478s ago: executing program 2 (id=96): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0xcc61}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)="92", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 1m24.244033s ago: executing program 2 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 1m24.218800882s ago: executing program 32 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 16.527926909s ago: executing program 5 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x14, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.437279858s ago: executing program 5 (id=849): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) unshare(0x26020480) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/fdt', 0x6c7e01, 0x155) sendfile(r1, r0, 0x0, 0x8) 16.055971746s ago: executing program 5 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0000001a0a050000000000000000000a0000080c0004"], 0x504}}, 0x0) 15.91647405s ago: executing program 5 (id=856): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYBLOB="b5aeb8ee41283894d3a92a5f2e938d001e75134a6c84b5af394f7acfd82e32c798c8b845b9669f24699212cd02e80152f05442f604af4273f7da7d6056123abc53d651b4bca585c211a7", @ANYRESDEC], 0x0, 0x2ba, &(0x7f0000000e00)="$eJzs3MFqE10UwPHzNf2aNKVNBBEU1INudBPa+AAapAUxoNSmqAthaicaMiZlJlQiYrMRtz5HcelOUF+gG3Hj3l0RBDddiFc6k7STNm3TNmli+/9BuSdz7mFuZ6blzEBm9f7bZ8W8l8pbFRmIqQyI1GRNJLke1f1XHwf8eEjCanJ15Ne38/cePLydyWYnp1WnMjPX0qo6dvHj85fvLn2ujMy+H/sQlZXko9Wf6e8rQytnV//MPC14WvC0VK6opXPlcsWac2ydL3jFlOpdx7Y8Wwslz3ab8nmnvLBQVas0PxpfcG3PU6tU1aJd1UpZK25VrSdWoaSpVEpH43KyDbYxJ7c8PW1ldkybSEdXhK4bbrXRdTO11snc8hGsCQAA9Jnd+/+g19+5/8/OBuN++v8ze/f/IvT/XVJr+rRH/49jwXUzVrz+99uM/h8AAAAAAAAAAAAAAAAAAAAAgH/BmjEJY0xifaxv8j9HRSQmIqae7/Ey0SXh829CP3uc/+s9Wi46LPTFvZiI82Yxt5gLxiCfyUtBHLFlXBLy278e6oJ46lZ2clx9SfnkLNXrlxZzEYk26huSreovnJoI6rW5/n+Jh/efloScbr3/dMv6IblyOVSfkoR8eSxlcWTev643619NqN68k91SP+zPAwAAAADgOEjphm33737enxCT7fngfYKh5wPGmKXdng9sub8elHPtvKISAAAAAAAcmld9UbQcx3YPEERF5BDlnQ+MEen9MiLSH0ejObghIn2wjKMKYiISbNGDlP/YKG+ryrQxZ1BEen5Y9hH0+j8TAAAAgE7bbPr3UfT1dRdXBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAydPu+8Aa87elGoldykO7ixz5LwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0kb8BAAD//8JfHKg=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 15.485848722s ago: executing program 5 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 14.308163048s ago: executing program 5 (id=870): mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 14.277236732s ago: executing program 33 (id=870): mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 5.231866704s ago: executing program 0 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) 4.303889485s ago: executing program 0 (id=993): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x11) close(r0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fanotify_init(0x20, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.34454616s ago: executing program 0 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01deffffffffffffff0007000000140001800500020001000000080006001c000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 3.34145331s ago: executing program 6 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 3.203751534s ago: executing program 0 (id=1007): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008808) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@iv={0x18}], 0x18}], 0x1, 0x0) 3.175005736s ago: executing program 0 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 2.619331531s ago: executing program 6 (id=1009): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7e5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.463613947s ago: executing program 6 (id=1014): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = epoll_create1(0x0) r2 = eventfd2(0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000002580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.308856232s ago: executing program 0 (id=1020): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) 1.440383128s ago: executing program 6 (id=1023): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, 0x0) 1.291714852s ago: executing program 4 (id=1026): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @random="b3bef56bcd32"}, 0x10) 1.147556137s ago: executing program 1 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) 1.147426547s ago: executing program 4 (id=1030): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) exit(0x2616) timer_delete(r0) 1.147270517s ago: executing program 3 (id=1031): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf40", 0x14) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 809.30226ms ago: executing program 6 (id=1032): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) unshare(0x400) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0xfffffffc, {0xf, 0xcbff, 0x0, {0x3, 0x5, 0xb, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 783.713542ms ago: executing program 6 (id=1033): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000007a00)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@errors_remount}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x8000000000000001}}, {@auto_da_alloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@dioread_nolock}, {@bh}, {@i_version}], [{@flag='posixacl'}, {@dont_hash}]}, 0xfe, 0x55c, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x10) 264.048574ms ago: executing program 1 (id=1034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) 263.870144ms ago: executing program 3 (id=1035): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x7, 0x2, [0x6, 0x267]}, 0xc) 263.770424ms ago: executing program 4 (id=1036): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 220.751048ms ago: executing program 4 (id=1037): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@generic={0x1, 0xffffffff80000000, 0x9}) 220.614258ms ago: executing program 3 (id=1038): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 202.66711ms ago: executing program 1 (id=1039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c000000000101040000000100000000020000002c0001801400018008000100e000000108000200ac1414000c000280050001000000000006000340000400002400028014000180080001"], 0x6c}}, 0x0) 140.088486ms ago: executing program 4 (id=1040): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x5, 0x4) 139.780436ms ago: executing program 4 (id=1041): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 135.692827ms ago: executing program 1 (id=1042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24004044) 128.990957ms ago: executing program 3 (id=1043): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, 0x0, 0x0, 0x12000000, 0x0, 0x0) 56.059634ms ago: executing program 3 (id=1044): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x2000000003c0, 0x2000000003f0, 0x200000000420], 0x0, 0x0, 0x0}, 0x108) 55.896344ms ago: executing program 1 (id=1045): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 55.834464ms ago: executing program 3 (id=1046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff) 0s ago: executing program 1 (id=1047): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r1, 0xc}, 0x8) kernel console output (not intermixed with test programs): F(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.176869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.181015][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.188664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.190180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.192051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.193258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.194476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.196285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.199212][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.210176][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.211743][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.240058][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.241665][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.243636][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.245000][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.255133][ T4319] device veth0_vlan entered promiscuous mode [ 33.260311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.262164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.269950][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.271731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.273137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.274436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.275938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.284351][ T4319] device veth1_vlan entered promiscuous mode [ 33.289634][ T4322] device veth0_vlan entered promiscuous mode [ 33.297527][ T4322] device veth1_vlan entered promiscuous mode [ 33.300641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.302227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.303607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.304870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.317216][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.320523][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.323168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.324764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.328499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.348783][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.350424][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.352016][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.357330][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.359003][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.365428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.367131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.368603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.370125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.373310][ T4322] device veth0_macvtap entered promiscuous mode [ 33.381472][ T4319] device veth0_macvtap entered promiscuous mode [ 33.384640][ T4319] device veth1_macvtap entered promiscuous mode [ 33.387840][ T4322] device veth1_macvtap entered promiscuous mode [ 33.397023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.398537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.399975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.401451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.402941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.404481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.407370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.408700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.410268][ T4326] device veth0_vlan entered promiscuous mode [ 33.420459][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.423476][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.425239][ T4320] device veth0_vlan entered promiscuous mode [ 33.427643][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.429720][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.431286][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.432804][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.434403][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.436918][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.439007][ T4326] device veth1_vlan entered promiscuous mode [ 33.440378][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.442182][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.443566][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.447470][ T4322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448806][ T4322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450005][ T4322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.451297][ T4322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.453470][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.455120][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.458082][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.459193][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.460854][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.465232][ T4320] device veth1_vlan entered promiscuous mode [ 33.483589][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.485177][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.487617][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.489080][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.490627][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.492141][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.493560][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.495251][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.497515][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.499848][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.501797][ T4324] device veth0_vlan entered promiscuous mode [ 33.503922][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.505356][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.507893][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.509415][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.513931][ T4324] device veth1_vlan entered promiscuous mode [ 33.520969][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.522288][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523783][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.525089][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.530341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.531895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.533412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.540566][ T4326] device veth0_macvtap entered promiscuous mode [ 33.553974][ T4326] device veth1_macvtap entered promiscuous mode [ 33.564539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.566592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.567856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.569196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.570679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.575390][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.578617][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.583426][ T4320] device veth0_macvtap entered promiscuous mode [ 33.584848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.586775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.593350][ T4324] device veth0_macvtap entered promiscuous mode [ 33.596137][ T4324] device veth1_macvtap entered promiscuous mode [ 33.601269][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.602908][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.604322][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.607357][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.612612][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.614147][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.615822][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.617334][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.619366][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.621530][ T4320] device veth1_macvtap entered promiscuous mode [ 33.628494][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.629883][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.631458][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.642920][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.644585][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.649285][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.650903][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.652306][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.653845][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.656368][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.659722][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.661355][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.662803][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.664281][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.666620][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.668237][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.668711][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.669417][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.671025][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.673457][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.674992][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.677556][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.679233][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.680660][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.682243][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.684402][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.688597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.690156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.691700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.693100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.694717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.696873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.698360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.700559][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.702093][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.703611][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.705253][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.707138][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.708405][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.709801][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.711499][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.713680][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.718713][ T4324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.720115][ T4324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.721448][ T4324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.722786][ T4324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.726863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.728206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.729725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.735415][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.736989][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.738258][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.739555][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.742598][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.744074][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.745513][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.747937][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.749405][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.750841][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.752222][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.753756][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.756301][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.757549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.759116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.763208][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.763946][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.764477][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.769534][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.770872][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.772123][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.776996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.862794][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.864035][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.867069][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.882645][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.883099][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.883885][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.884516][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.885045][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.906436][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.908262][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.909587][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.911168][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.962061][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.963337][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.964986][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.970197][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.971550][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.973300][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.094628][ T4445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10'. [ 34.179531][ T4454] loop0: detected capacity change from 0 to 256 [ 34.282527][ T4443] loop4: detected capacity change from 0 to 32768 [ 34.291033][ T4437] loop1: detected capacity change from 0 to 32768 [ 34.631803][ T4443] XFS (loop4): Mounting V5 Filesystem [ 34.636075][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 34.637855][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 34.637882][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 34.639134][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 34.699923][ T4443] XFS (loop4): Ending clean mount [ 34.716983][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 34.746800][ T4324] XFS (loop4): Unmounting Filesystem [ 35.072217][ T4481] loop1: detected capacity change from 0 to 32768 [ 35.084706][ T4481] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 35.096480][ T4481] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 35.113352][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 35.143980][ T4322] ocfs2: Unmounting device (7,1) on (node local) [ 35.269555][ T4505] loop0: detected capacity change from 0 to 64 [ 35.594072][ T4320] hfs: node 4:3 still has 1 user(s)! [ 35.751973][ T4519] netlink: 'syz.0.30': attribute type 5 has an invalid length. [ 35.753991][ T4519] netlink: 'syz.0.30': attribute type 27 has an invalid length. [ 35.755273][ T4519] netlink: 'syz.0.30': attribute type 6 has an invalid length. [ 35.762023][ T4519] netlink: 2237 bytes leftover after parsing attributes in process `syz.0.30'. [ 35.819327][ T4526] loop4: detected capacity change from 0 to 512 [ 35.851954][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.34: inode has both inline data and extents flags [ 35.860546][ T4526] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.34: couldn't read orphan inode 15 (err -117) [ 35.869801][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.117412][ T4539] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 36.725792][ T4332] Bluetooth: hci3: command 0x040f tx timeout [ 36.726855][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 36.727802][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 36.728782][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 36.733090][ T4324] EXT4-fs (loop4): unmounting filesystem. [ 36.805974][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 37.061337][ T4572] loop0: detected capacity change from 0 to 47 [ 37.066685][ T4572] ======================================================= [ 37.066685][ T4572] WARNING: The mand mount option has been deprecated and [ 37.066685][ T4572] and is ignored by this kernel. Remove the mand [ 37.066685][ T4572] option from the mount to silence this warning. [ 37.066685][ T4572] ======================================================= [ 37.741044][ T4592] loop0: detected capacity change from 0 to 4096 [ 37.742485][ T4592] ntfs3: Unknown parameter 'windows_names' [ 37.780682][ T4313] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.834351][ T4604] usb usb8: usbfs: process 4604 (syz.2.64) did not claim interface 0 before use [ 38.194906][ T4617] IPVS: Error connecting to the multicast addr [ 38.383896][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 38.592299][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 39.015876][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 39.016942][ T4325] Bluetooth: hci2: command 0x0419 tx timeout [ 39.017983][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 39.094933][ T4329] Bluetooth: hci4: command 0x0419 tx timeout [ 39.114783][ T4629] loop4: detected capacity change from 0 to 4096 [ 39.474320][ T4629] ntfs3: Unknown parameter '/dev/ptmx' [ 39.509146][ T4311] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.631718][ T4662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 40.240097][ T4686] loop2: detected capacity change from 0 to 2048 [ 40.252399][ T4686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.273590][ T4686] overlayfs: upper fs needs to support d_type. [ 40.277327][ T4686] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 40.278645][ T4686] overlayfs: failed to set xattr on upper [ 40.279510][ T4686] overlayfs: ...falling back to index=off,metacopy=off. [ 40.314256][ T4326] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 40.314979][ T4692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.318261][ T4692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.318371][ T4326] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 40.395677][ T4335] Bluetooth: hci5: command 0x1003 tx timeout [ 40.397217][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 40.469764][ T4700] loop1: detected capacity change from 0 to 1024 [ 40.533846][ T230] hfsplus: b-tree write err: -5, ino 4 [ 40.650171][ T4704] loop0: detected capacity change from 0 to 32768 [ 40.684321][ T4704] XFS (loop0): Mounting V5 Filesystem [ 40.701456][ T4704] XFS (loop0): Ending clean mount [ 40.721216][ T4320] XFS (loop0): Unmounting Filesystem [ 40.873533][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 41.176307][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.178439][ T4329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.180282][ T4329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.182462][ T4329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.183984][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 41.185412][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.334005][ T4744] chnl_net:caif_netlink_parms(): no params data found [ 41.373521][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.374833][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.376780][ T4744] device bridge_slave_0 entered promiscuous mode [ 41.379004][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.380214][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.381966][ T4744] device bridge_slave_1 entered promiscuous mode [ 41.394826][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.397720][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.415784][ T4744] team0: Port device team_slave_0 added [ 41.517782][ T4762] loop0: detected capacity change from 0 to 1024 [ 41.707183][ T4744] team0: Port device team_slave_1 added [ 41.768564][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.769768][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.773914][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.779271][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.781513][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.789275][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.078564][ T4744] device hsr_slave_0 entered promiscuous mode [ 42.126154][ T4744] device hsr_slave_1 entered promiscuous mode [ 42.170295][ T4541] hfsplus: b-tree write err: -5, ino 4 [ 42.195767][ T4744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.199793][ T4744] Cannot create hsr debugfs directory [ 42.259069][ T4771] loop3: detected capacity change from 0 to 32768 [ 42.277308][ T4771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.124 (4771) [ 42.313974][ T4771] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.326398][ T4771] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 42.333893][ T4771] BTRFS info (device loop3): turning on sync discard [ 42.345487][ T4771] BTRFS info (device loop3): disabling free space tree [ 42.352484][ T4771] BTRFS info (device loop3): setting nodatasum [ 42.353492][ T4771] BTRFS info (device loop3): turning on async discard [ 42.362070][ T4771] BTRFS info (device loop3): turning off barriers [ 42.373143][ T4771] BTRFS info (device loop3): disabling tree log [ 42.375843][ T4771] BTRFS info (device loop3): enabling ssd optimizations [ 42.378526][ T4771] BTRFS info (device loop3): force clearing of disk cache [ 42.381647][ T4771] BTRFS info (device loop3): enabling auto defrag [ 42.384181][ T4771] BTRFS info (device loop3): force zlib compression, level 3 [ 42.387366][ T4771] BTRFS info (device loop3): max_inline at 4096 [ 42.436462][ T4744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.464965][ T4808] loop1: detected capacity change from 0 to 47 [ 42.467402][ T4744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.487159][ T4744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.504236][ T4808] syz.1.130: attempt to access beyond end of device [ 42.504236][ T4808] loop1: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 42.515819][ T4808] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 42.517255][ T4808] syz.1.130: attempt to access beyond end of device [ 42.517255][ T4808] loop1: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 42.531376][ T4744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.532745][ T4808] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 42.534084][ T4808] syz.1.130: attempt to access beyond end of device [ 42.534084][ T4808] loop1: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 42.540569][ T4808] Buffer I/O error on dev loop1, logical block 26, lost async page write [ 42.544815][ T4808] syz.1.130: attempt to access beyond end of device [ 42.544815][ T4808] loop1: rw=2049, sector=54, nr_sectors = 2 limit=47 [ 42.549626][ T4808] Buffer I/O error on dev loop1, logical block 27, lost async page write [ 42.573606][ T4771] BTRFS info (device loop3): rebuilding free space tree [ 42.583849][ T4818] loop4: detected capacity change from 0 to 1024 [ 42.591067][ T4771] BTRFS info (device loop3): disabling free space tree [ 42.593362][ T4771] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 42.595698][ T4771] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 42.763625][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.769633][ T4744] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.783373][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.799729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.802064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.807101][ T4829] loop1: detected capacity change from 0 to 65536 [ 42.830790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.832535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.838197][ T4319] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.848712][ T4818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.856680][ T4829] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 42.856724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.869826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.874157][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.875385][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.879320][ T4829] XFS (loop1): Mounting V5 Filesystem [ 42.897464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.905457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.914914][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.916161][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.917912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.919762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.921653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.923212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.924818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.926580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.928153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.929644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.959759][ T4829] XFS (loop1): Ending clean mount [ 42.964011][ T4829] XFS (loop1): Quotacheck needed: Please wait. [ 42.985760][ T4829] XFS (loop1): Quotacheck: Done. [ 43.027859][ T4853] loop3: detected capacity change from 0 to 128 [ 43.196466][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 43.521641][ T4322] XFS (loop1): Unmounting Filesystem [ 43.542765][ T4866] loop0: detected capacity change from 0 to 64 [ 43.559889][ T4768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.585922][ T4324] EXT4-fs (loop4): unmounting filesystem. [ 43.590286][ T4866] hfs: hfs: Invalid key length: 94 [ 43.662272][ T4768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.674608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.676096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.680881][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.787776][ T4768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.887251][ T4768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.995135][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.998975][ T230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.016138][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.017619][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.019232][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.020613][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.023592][ T4744] device veth0_vlan entered promiscuous mode [ 44.042320][ T4744] device veth1_vlan entered promiscuous mode [ 44.100299][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.102013][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.103854][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.106131][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.114908][ T4744] device veth0_macvtap entered promiscuous mode [ 44.128483][ T4744] device veth1_macvtap entered promiscuous mode [ 44.154651][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.161003][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.166266][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.167934][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.169389][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.170972][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.221745][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.223504][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.229742][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.232147][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.240655][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.245247][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.247552][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.253451][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.258712][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.265300][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.274446][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.278394][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.282234][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.375710][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.378174][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.380372][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.382505][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.552510][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.559136][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.565469][ T4941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.569186][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.576296][ T4941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.680195][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.681806][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.687531][ T4744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.689087][ T4744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.690521][ T4744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.691808][ T4744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.855312][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.859830][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.863152][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.029443][ T5012] loop4: detected capacity change from 0 to 16 [ 45.047382][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.048624][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.095283][ T5012] erofs: (device loop4): mounted with root inode @ nid 36. [ 45.179467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.276780][ T4329] Bluetooth: hci2: command 0x041b tx timeout [ 45.278475][ T5027] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 45.715957][ T5035] loop3: detected capacity change from 0 to 32768 [ 45.785021][ T5035] XFS (loop3): Mounting V5 Filesystem [ 45.802718][ T5035] XFS (loop3): Ending clean mount [ 45.809240][ T5035] XFS (loop3): Quotacheck needed: Please wait. [ 45.832563][ T5035] XFS (loop3): Quotacheck: Done. [ 45.885477][ T4319] XFS (loop3): Unmounting Filesystem [ 46.120189][ T5032] loop4: detected capacity change from 0 to 40427 [ 46.438940][ T5032] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(1) [ 46.444187][ T5032] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.448817][ T5032] F2FS-fs (loop4): invalid crc value [ 46.463798][ T5032] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.525445][ T5032] F2FS-fs (loop4): Start checkpoint disabled! [ 46.561890][ T5032] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.579223][ T5032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 46.789124][ T4768] device hsr_slave_0 left promiscuous mode [ 46.845747][ T4768] device hsr_slave_1 left promiscuous mode [ 46.864162][ T5093] loop4: detected capacity change from 0 to 128 [ 46.881025][ T5093] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 46.883333][ T5093] hpfs: filesystem error: improperly stopped [ 46.884269][ T5093] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 46.893801][ T5096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.895436][ T5096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.911421][ T5093] hpfs: You really don't want any checks? You are crazy... [ 46.913084][ T5093] hpfs: hpfs_map_sector(): read error [ 46.913830][ T5093] hpfs: code page support is disabled [ 46.923094][ T5093] hpfs: hpfs_map_4sectors(): unaligned read [ 46.924384][ T5093] hpfs: hpfs_map_4sectors(): unaligned read [ 46.934911][ T5093] hpfs: filesystem error: unable to find root dir [ 46.965941][ T4768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.967269][ T4768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.974772][ T4768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.978367][ T4768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.980900][ T4768] device bridge_slave_1 left promiscuous mode [ 46.986003][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.035148][ T5110] 9pnet_fd: Insufficient options for proto=fd [ 47.040395][ T4768] device bridge_slave_0 left promiscuous mode [ 47.041676][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.176354][ T4768] device veth1_macvtap left promiscuous mode [ 47.177542][ T4768] device veth0_macvtap left promiscuous mode [ 47.178559][ T4768] device veth1_vlan left promiscuous mode [ 47.179567][ T4768] device veth0_vlan left promiscuous mode [ 47.355658][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 49.242499][ T5143] capability: warning: `syz.0.190' uses deprecated v2 capabilities in a way that may be insecure [ 49.435679][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 49.805769][ T5154] loop5: detected capacity change from 0 to 1024 [ 50.058203][ T4768] team0 (unregistering): Port device team_slave_1 removed [ 50.227457][ T4768] team0 (unregistering): Port device team_slave_0 removed [ 50.426647][ T4768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.531924][ T4991] hfsplus: b-tree write err: -5, ino 4 [ 50.676055][ T4768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.286026][ T4329] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 51.288003][ T4329] Bluetooth: hci3: Injecting HCI hardware error event [ 51.289391][ T4329] Bluetooth: hci3: hardware error 0x00 [ 53.190845][ T4768] bond0 (unregistering): Released all slaves [ 53.437357][ T5133] tipc: Started in network mode [ 53.438290][ T5133] tipc: Node identity ac14140f, cluster identity 4711 [ 53.439713][ T5133] tipc: New replicast peer: 255.255.255.83 [ 53.441317][ T5133] tipc: Enabled bearer , priority 10 [ 53.442873][ T5160] netlink: 'syz.5.196': attribute type 6 has an invalid length. [ 53.515701][ T4329] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 53.600701][ T5173] device netdevsim0 entered promiscuous mode [ 53.737936][ T5183] tipc: Started in network mode [ 53.738732][ T5183] tipc: Node identity ac14141b, cluster identity 4711 [ 53.739781][ T5183] tipc: New replicast peer: 255.255.255.255 [ 53.741160][ T5183] tipc: Enabled bearer , priority 10 [ 53.940557][ T5187] tipc: Started in network mode [ 53.941523][ T5187] tipc: Node identity ac14140f, cluster identity 4711 [ 53.957385][ T5187] tipc: New replicast peer: 255.255.255.255 [ 53.958665][ T5187] tipc: Enabled bearer , priority 10 [ 54.431539][ T5213] Zero length message leads to an empty skb [ 54.440341][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.441594][ T5213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.452990][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.454226][ T5213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.559527][ T4388] tipc: Node number set to 2886997007 [ 54.735768][ T112] tipc: Node number set to 2886997019 [ 54.882974][ T5223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.888752][ T5223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.955964][ T3898] tipc: Node number set to 2886997007 [ 55.116236][ T5248] loop1: detected capacity change from 0 to 512 [ 55.135669][ T5248] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.137521][ T5248] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.151704][ T5248] EXT4-fs (loop1): 1 truncate cleaned up [ 55.152749][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.224590][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 55.366404][ T4388] kernel write not supported for file bpf-prog (pid: 4388 comm: kworker/1:6) [ 55.381457][ T5276] loop4: detected capacity change from 0 to 1024 [ 55.468417][ T4768] hfsplus: b-tree write err: -5, ino 4 [ 56.455081][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.487445][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.492154][ T5334] loop5: detected capacity change from 0 to 1024 [ 56.933754][ T5354] mmap: syz.1.252 (5354) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.330926][ T27] audit: type=1326 audit(57.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb75b9e8 code=0x7ffc0000 [ 57.334296][ T27] audit: type=1326 audit(57.320:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=89 compat=0 ip=0xffffbb75b9e8 code=0x7ffc0000 [ 57.339256][ T27] audit: type=1326 audit(57.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.5.255" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb75b9e8 code=0x7ffc0000 [ 57.749934][ T5374] loop4: detected capacity change from 0 to 1024 [ 57.758379][ T5374] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.781390][ T5374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.804544][ T4324] EXT4-fs (loop4): unmounting filesystem. [ 57.859743][ T5384] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 58.232549][ T5397] loop1: detected capacity change from 0 to 8 [ 58.252893][ T5397] SQUASHFS error: Failed to read block 0x6e6: -5 [ 58.253912][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.255031][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.256834][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.257760][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.258753][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.259717][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.260718][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.261727][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.262729][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.263703][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.264688][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.265713][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.266733][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.267733][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.268666][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.269563][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.270591][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.271983][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.273025][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.274080][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.275080][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.276089][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.277195][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.278288][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.279178][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.280210][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.281198][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.282087][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.283164][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.284161][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.285041][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.286150][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.287096][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.288025][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.289069][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.290084][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.291004][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.292068][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.293037][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.293961][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.294943][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.295986][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.296875][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.297915][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.298848][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.299768][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.300854][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.301858][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.302686][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.303756][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.304786][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.305733][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.306692][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.307686][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.308583][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.309607][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.310542][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.311455][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.312561][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.313576][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.314491][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.315615][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.316634][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.317583][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.318579][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.319556][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.320477][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.321555][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.322542][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.323412][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.324356][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.325280][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.326236][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.327218][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.328212][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.329095][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.330093][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.331083][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.331981][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.332990][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.333942][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.334842][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.336021][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.336989][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.337864][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.338893][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.339932][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.340766][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.341844][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.342886][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.343760][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.344799][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.345826][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.346697][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.347742][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.348755][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.349698][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.350721][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.352412][ T5397] SQUASHFS error: Failed to read block 0x0: -5 [ 58.353560][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.354606][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.355927][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.357062][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.358181][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.359200][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.360215][ T5397] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 58.361257][ T5397] SQUASHFS error: read_indexes: reading block [6e4:0] [ 58.522845][ T5409] loop3: detected capacity change from 0 to 32768 [ 58.693725][ T5409] XFS (loop3): Mounting V5 Filesystem [ 58.729786][ T5409] XFS (loop3): Ending clean mount [ 58.739420][ T5432] loop0: detected capacity change from 0 to 256 [ 58.743421][ T5432] exfat: Deprecated parameter 'utf8' [ 58.744202][ T5432] exfat: Deprecated parameter 'utf8' [ 58.745219][ T5432] exfat: Deprecated parameter 'utf8' [ 58.750555][ T5409] XFS (loop3): Quotacheck needed: Please wait. [ 58.780665][ T5409] XFS (loop3): Quotacheck: Done. [ 58.802958][ T5432] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 58.826466][ T4319] XFS (loop3): Unmounting Filesystem [ 59.052827][ T5434] loop4: detected capacity change from 0 to 40427 [ 59.059706][ T5434] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 59.110736][ T5446] loop0: detected capacity change from 0 to 256 [ 59.218007][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 59.751983][ T5460] loop4: detected capacity change from 0 to 32768 [ 59.778693][ T5460] loop4: p1 p2 p3 < p5 p6 > [ 59.779634][ T5460] loop4: p1 size 242222080 extends beyond EOD, truncated [ 59.782352][ T5460] loop4: p2 start 4294967295 is beyond EOD, truncated [ 59.867731][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 59.879327][ T4487] udevd[4487]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 59.882056][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 59.896152][ T5087] udevd[5087]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.915646][ T4329] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.113842][ T5486] [U] ÿ [ 60.142865][ T5491] loop2: detected capacity change from 0 to 7 [ 60.149541][ T5087] Dev loop2: unable to read RDB block 7 [ 60.168301][ T5087] loop2: unable to read partition table [ 60.169343][ T5087] loop2: partition table beyond EOD, truncated [ 60.172316][ T5491] Dev loop2: unable to read RDB block 7 [ 60.173291][ T5491] loop2: unable to read partition table [ 60.174391][ T5491] loop2: partition table beyond EOD, truncated [ 60.179270][ T5491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 60.314853][ T5500] loop0: detected capacity change from 0 to 4096 [ 60.341664][ T5500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 60.873435][ T5508] hub 2-0:1.0: USB hub found [ 60.874524][ T5508] hub 2-0:1.0: 8 ports detected [ 61.166274][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 61.168174][ T27] audit: type=1326 audit(61.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5512 comm="syz.5.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb75b9e8 code=0x7ffc0000 [ 61.172068][ T27] audit: type=1326 audit(61.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5512 comm="syz.5.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=179 compat=0 ip=0xffffbb75b9e8 code=0x7ffc0000 [ 61.235622][ T27] audit: type=1326 audit(61.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5512 comm="syz.5.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb75b9e8 code=0x7ffc0000 [ 61.304808][ T5523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.311'. [ 61.454743][ T5536] device netdevsim0 entered promiscuous mode [ 61.527264][ T5539] loop1: detected capacity change from 0 to 512 [ 61.537797][ T5539] EXT4-fs (loop1): Test dummy encryption mode enabled [ 61.560371][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.561593][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.562655][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.563726][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.564855][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.578650][ T5522] loop5: detected capacity change from 0 to 32768 [ 61.579965][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.316: iget: bad extra_isize 90 (inode size 256) [ 61.582621][ T5522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.310 (5522) [ 61.590379][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.591511][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.316: error while reading EA inode 11 err=-117 [ 61.592283][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.595356][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.596947][ T5539] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.599037][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.600043][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.600954][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.316: iget: bad extra_isize 90 (inode size 256) [ 61.601113][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.604135][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.605363][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.610990][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.316: error while reading EA inode 11 err=-117 [ 61.613360][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.614578][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.616414][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #18: comm syz.1.316: iget: bad extra_isize 90 (inode size 256) [ 61.618823][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.622119][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.623305][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.624329][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.624564][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.625370][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.627218][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.632073][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.633077][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.316: error while reading EA inode 18 err=-117 [ 61.635184][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.636305][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.637400][ T4848] hid-generic 0004:0800:0000.0001: unknown main item tag 0x0 [ 61.639774][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #18: comm syz.1.316: iget: bad extra_isize 90 (inode size 256) [ 61.642498][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.642709][ T4848] hid-generic 0004:0800:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.643573][ T5539] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.316: error while reading EA inode 18 err=-117 [ 61.649920][ T5539] EXT4-fs (loop1): Remounting filesystem read-only [ 61.651415][ T5539] EXT4-fs (loop1): 1 orphan inode deleted [ 61.652341][ T5539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.664847][ T5522] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.666703][ T5522] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 61.667947][ T5522] BTRFS info (device loop5): using free space tree [ 61.723073][ T5557] fido_id[5557]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.733287][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 61.799117][ T5576] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 61.808331][ T5522] BTRFS info (device loop5): enabling ssd optimizations [ 61.864561][ T4744] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.919719][ T5581] loop1: detected capacity change from 0 to 4096 [ 62.058145][ T4322] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 62.059323][ T4322] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 63.032493][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 63.033794][ T5602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 63.155298][ T5619] loop3: detected capacity change from 0 to 2048 [ 63.166633][ T5619] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 63.183055][ T5619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.306369][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 63.308626][ T5634] device veth1_macvtap left promiscuous mode [ 63.452342][ T5650] loop5: detected capacity change from 0 to 64 [ 63.491346][ T5653] loop4: detected capacity change from 0 to 1024 [ 63.591646][ T5667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.359'. [ 63.622050][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.623403][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.626989][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.628251][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.629399][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.630426][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.631549][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.632669][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.633745][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.634746][ T5669] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 63.644627][ T5670] ptrace attach of "./syz-executor exec"[4322] was attempted by "./syz-executor exec"[5670] [ 63.912477][ T5699] loop5: detected capacity change from 0 to 128 [ 64.046371][ T5702] loop5: detected capacity change from 0 to 32768 [ 64.049475][ T5702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.375 (5702) [ 64.060732][ T5702] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.062257][ T5702] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 64.063452][ T5702] BTRFS info (device loop5): using free space tree [ 64.156840][ T5694] loop0: detected capacity change from 0 to 4096 [ 64.170559][ T5702] BTRFS info (device loop5): enabling ssd optimizations [ 64.487854][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489307][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.490510][ T14] cfg80211: failed to load regulatory.db [ 64.708753][ T5746] loop4: detected capacity change from 0 to 32768 [ 64.752500][ T5746] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 64.754071][ T5746] XFS (loop4): Mounting V5 Filesystem [ 64.870939][ T4744] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.956086][ T5746] XFS (loop4): Ending clean mount [ 64.958343][ T5746] XFS (loop4): Quotacheck needed: Please wait. [ 64.987445][ T5746] XFS (loop4): Quotacheck: Done. [ 65.031951][ T4324] XFS (loop4): Unmounting Filesystem [ 65.144769][ T5784] loop1: detected capacity change from 0 to 512 [ 65.194683][ T5784] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.397: inode has both inline data and extents flags [ 65.199086][ T5784] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.397: couldn't read orphan inode 15 (err -117) [ 65.201167][ T5784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.000723][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 66.000906][ T5826] loop3: detected capacity change from 0 to 2048 [ 66.005489][ T5826] EXT4-fs: Ignoring removed bh option [ 66.025473][ T5828] binder: 5827:5828 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.036372][ T5828] binder: 5828 RLIMIT_NICE not set [ 66.037855][ T5826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.135227][ T4388] binder: undelivered death notification, 0000000000000000 [ 66.261473][ T5837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.264732][ T5837] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 66.266853][ T5837] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.266853][ T5837] [ 66.268336][ T5837] EXT4-fs (loop3): Total free blocks count 0 [ 66.269391][ T5837] EXT4-fs (loop3): Free/Dirty block details [ 66.270322][ T5837] EXT4-fs (loop3): free_blocks=2415919104 [ 66.271285][ T5837] EXT4-fs (loop3): dirty_blocks=32 [ 66.272179][ T5837] EXT4-fs (loop3): Block reservation details [ 66.273148][ T5837] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 66.820889][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 66.889618][ T5845] loop3: detected capacity change from 0 to 2048 [ 67.056072][ T5845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.064714][ T5861] loop4: detected capacity change from 0 to 1024 [ 67.076885][ T5861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.391049][ T5866] EXT4-fs (loop4): shut down requested (1) [ 67.435891][ T5845] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.445225][ T5845] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 692 with error 28 [ 67.447334][ T5845] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.447334][ T5845] [ 67.448740][ T5845] EXT4-fs (loop3): Total free blocks count 0 [ 67.464684][ T5845] EXT4-fs (loop3): Free/Dirty block details [ 67.473149][ T5845] EXT4-fs (loop3): free_blocks=2415919104 [ 67.474074][ T5845] EXT4-fs (loop3): dirty_blocks=704 [ 67.475082][ T5845] EXT4-fs (loop3): Block reservation details [ 67.484247][ T4324] EXT4-fs (loop4): unmounting filesystem. [ 67.485202][ T5845] EXT4-fs (loop3): i_reserved_data_blocks=44 [ 67.617545][ T5007] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 14 with max blocks 10 with error 28 [ 68.646142][ T5586] kernel write not supported for file /snd/midiC2D0 (pid: 5586 comm: kworker/0:8) [ 69.446536][ T4388] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.579175][ T5924] syz.4.431 uses obsolete (PF_INET,SOCK_PACKET) [ 69.646093][ T4388] usb 1-1: Using ep0 maxpacket: 8 [ 69.651497][ T4388] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 69.652765][ T4388] usb 1-1: config 0 has no interface number 0 [ 69.657814][ T4388] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 69.659299][ T4388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.660612][ T4388] usb 1-1: Product: syz [ 69.661421][ T4388] usb 1-1: Manufacturer: syz [ 69.662202][ T4388] usb 1-1: SerialNumber: syz [ 69.698151][ T4388] usb 1-1: config 0 descriptor?? [ 69.708590][ T4388] redrat3 1-1:0.31: Couldn't find all endpoints [ 69.912454][ T5888] IPVS: rr: FWM 3 0x00000003 - no destination available [ 69.916731][ T4388] usb 1-1: USB disconnect, device number 2 [ 70.287147][ T5931] loop3: detected capacity change from 0 to 32768 [ 70.290981][ T5931] (syz.3.434,5931,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 70.292472][ T5931] (syz.3.434,5931,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 70.772350][ T5987] delete_channel: no stack [ 71.492693][ T5999] loop5: detected capacity change from 0 to 16 [ 71.574840][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.576639][ T5999] erofs: (device loop5): mounted with root inode @ nid 36. [ 71.579609][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.943017][ T6032] loop3: detected capacity change from 0 to 512 [ 71.964532][ T6032] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.457: inode has both inline data and extents flags [ 71.980612][ T6032] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.457: couldn't read orphan inode 15 (err -117) [ 71.982661][ T6032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.030932][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 72.110613][ T6049] loop5: detected capacity change from 0 to 256 [ 72.150419][ T6049] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 72.226528][ T6056] binder: 6055:6056 tried to acquire reference to desc 0, got 1 instead [ 72.231572][ T5586] binder: release 6055:6056 transaction 9 out, still active [ 72.232881][ T5586] binder: undelivered TRANSACTION_COMPLETE [ 72.241993][ T5586] binder: send failed reply for transaction 9, target dead [ 73.059301][ T6065] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 73.141515][ T6080] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 73.348851][ T6104] loop5: detected capacity change from 0 to 512 [ 73.393386][ T6104] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.472: inode #13: comm syz.5.472: iget: illegal inode # [ 73.399913][ T6104] EXT4-fs (loop5): Remounting filesystem read-only [ 73.404701][ T6104] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.472: couldn't read orphan inode 13 (err -117) [ 73.409817][ T6104] EXT4-fs (loop5): Remounting filesystem read-only [ 73.414083][ T6104] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.482422][ T4744] EXT4-fs (loop5): unmounting filesystem. [ 74.026872][ T6146] loop4: detected capacity change from 0 to 40427 [ 74.030775][ T6146] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 74.032073][ T6146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 74.034875][ T6146] F2FS-fs (loop4): invalid crc value [ 74.065910][ T6146] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.090049][ T6146] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 74.091222][ T6146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 74.108794][ T6146] syz.4.480: attempt to access beyond end of device [ 74.108794][ T6146] loop4: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 74.467845][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.501947][ T6160] loop4: detected capacity change from 0 to 764 [ 74.566957][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.671311][ T6162] loop4: detected capacity change from 0 to 32768 [ 74.673134][ T6162] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.486 (6162) [ 74.685679][ T6162] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.687288][ T6162] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 74.688522][ T6162] BTRFS info (device loop4): using free space tree [ 75.140631][ T6162] BTRFS info (device loop4): enabling ssd optimizations [ 75.438406][ T4324] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.560928][ T6200] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.562489][ T6200] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.564034][ T6200] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.565362][ T6200] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.573216][ T6200] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 75.736315][ T6211] Bluetooth: MGMT ver 1.22 [ 75.737209][ T6211] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 75.831628][ T6215] device syzkaller1 entered promiscuous mode [ 75.992494][ T6221] bridge0: port 3(hsr_slave_1) entered blocking state [ 75.998300][ T6221] bridge0: port 3(hsr_slave_1) entered disabled state [ 76.116041][ T6219] loop0: detected capacity change from 0 to 40427 [ 76.121374][ T6219] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 76.123655][ T6219] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.130321][ T6219] F2FS-fs (loop0): invalid crc value [ 76.153905][ T6219] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.171156][ T6219] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.172400][ T6219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.185616][ T6219] syz.0.503: attempt to access beyond end of device [ 76.185616][ T6219] loop0: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 76.192507][ T6219] syz.0.503: attempt to access beyond end of device [ 76.192507][ T6219] loop0: rw=0, sector=53256, nr_sectors = 8 limit=40427 [ 76.282238][ T6223] loop3: detected capacity change from 0 to 32768 [ 76.305359][ T6223] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.505 (6223) [ 76.335515][ T6223] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 76.337327][ T6223] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.338730][ T6223] BTRFS info (device loop3): using free space tree [ 76.495644][ T6223] BTRFS info (device loop3): enabling ssd optimizations [ 76.519025][ T4319] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 77.536165][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.537951][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.542683][ T6263] loop5: detected capacity change from 0 to 40427 [ 77.549427][ T6263] F2FS-fs (loop5): Invalid Fs Meta Ino: node(2) meta(2) root(3) [ 77.554522][ T6263] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 77.556827][ T6263] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 77.558014][ T6263] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1 [ 77.563637][ T6263] F2FS-fs (loop5): invalid crc value [ 77.566862][ T6263] F2FS-fs (loop5) : inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x1434/0x4234 [ 77.568368][ T6263] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 78.088959][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.102449][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.584436][ T6290] loop5: detected capacity change from 0 to 32768 [ 78.615185][ T6290] XFS (loop5): Mounting V5 Filesystem [ 78.648774][ T6290] XFS (loop5): Ending clean mount [ 78.708289][ T4744] XFS (loop5): Unmounting Filesystem [ 78.900424][ T6331] loop4: detected capacity change from 0 to 128 [ 78.902800][ T6331] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 78.904789][ T6331] hpfs: filesystem error: improperly stopped [ 78.906764][ T6331] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 78.908033][ T6331] hpfs: You really don't want any checks? You are crazy... [ 78.919413][ T6331] hpfs: hpfs_map_sector(): read error [ 78.920182][ T6331] hpfs: code page support is disabled [ 78.921195][ T6331] hpfs: hpfs_map_4sectors(): unaligned read [ 78.922091][ T6331] hpfs: hpfs_map_4sectors(): unaligned read [ 78.925105][ T6331] hpfs: filesystem error: unable to find root dir [ 78.931928][ T6331] hpfs: hpfs_map_4sectors(): unaligned read [ 79.009908][ T6343] loop5: detected capacity change from 0 to 16 [ 79.012325][ T6343] erofs: (device loop5): mounted with root inode @ nid 36. [ 79.146413][ T6349] loop5: detected capacity change from 0 to 512 [ 79.155624][ T6349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.178445][ T6349] EXT4-fs (loop5): 1 truncate cleaned up [ 79.179473][ T6349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.814398][ T4744] EXT4-fs (loop5): unmounting filesystem. [ 80.344177][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.349052][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.805338][ T6386] loop0: detected capacity change from 0 to 256 [ 80.949743][ T6255] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 80.951082][ T6255] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 80.952200][ T6255] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 80.953973][ T6255] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 81.000728][ T6395] loop0: detected capacity change from 0 to 128 [ 81.468381][ T6396] fido_id[6396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.734434][ T6397] orangefs_mount: mount request failed with -4 [ 81.801073][ T6408] loop4: detected capacity change from 0 to 128 [ 82.344748][ T6416] loop0: detected capacity change from 0 to 40427 [ 82.352213][ T6416] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 82.353607][ T6416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.362066][ T6416] F2FS-fs (loop0): invalid crc value [ 82.368795][ T6416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.388391][ T6416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.389573][ T6416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.396896][ T6444] loop5: detected capacity change from 0 to 2048 [ 83.414989][ T6444] EXT4-fs: Ignoring removed bh option [ 83.415555][ C0] sched: RT throttling activated [ 83.447996][ T6444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 83.537614][ T6448] loop3: detected capacity change from 0 to 32768 [ 83.539290][ T6448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.577 (6448) [ 83.628863][ T6455] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.631549][ T6455] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 83.633487][ T6455] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.633487][ T6455] [ 83.634873][ T6455] EXT4-fs (loop5): Total free blocks count 0 [ 83.635774][ T6455] EXT4-fs (loop5): Free/Dirty block details [ 83.636692][ T6455] EXT4-fs (loop5): free_blocks=2415919104 [ 83.637588][ T6455] EXT4-fs (loop5): dirty_blocks=32 [ 83.638362][ T6455] EXT4-fs (loop5): Block reservation details [ 83.639292][ T6455] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 83.850311][ T6448] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.852170][ T6448] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 83.853595][ T6448] BTRFS info (device loop3): force clearing of disk cache [ 83.854768][ T6448] BTRFS info (device loop3): enabling auto defrag [ 83.856433][ T6448] BTRFS info (device loop3): max_inline at 0 [ 83.858244][ T6448] BTRFS info (device loop3): enabling disk space caching [ 83.859588][ T6448] BTRFS info (device loop3): disk space caching is enabled [ 83.863743][ T6430] loop1: detected capacity change from 0 to 32768 [ 83.923138][ T6430] XFS (loop1): Mounting V5 Filesystem [ 83.947108][ T6474] loop0: detected capacity change from 0 to 8192 [ 83.956684][ T6430] XFS (loop1): Ending clean mount [ 83.973987][ T6474] loop0: p1 < > [ 83.980307][ T6448] BTRFS info (device loop3): enabling ssd optimizations [ 83.982058][ T6448] BTRFS info (device loop3): rebuilding free space tree [ 83.999973][ T6448] BTRFS info (device loop3): disabling free space tree [ 84.005069][ T6448] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.008804][ T4322] XFS (loop1): Unmounting Filesystem [ 84.018493][ T6448] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.099550][ T4319] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.233831][ T4744] EXT4-fs (loop5): unmounting filesystem. [ 84.672667][ T5087] udevd[5087]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.888014][ T6526] validate_nla: 43 callbacks suppressed [ 84.888028][ T6526] netlink: 'syz.1.590': attribute type 5 has an invalid length. [ 84.900591][ T6527] binder: 6525:6527 unknown command 0 [ 84.901409][ T6527] binder: 6525:6527 ioctl c0306201 20000100 returned -22 [ 84.953038][ T6531] loop0: detected capacity change from 0 to 64 [ 85.846219][ T6561] loop0: detected capacity change from 0 to 512 [ 85.853342][ T6561] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.647377][ T6566] loop1: detected capacity change from 0 to 128 [ 86.708690][ T6568] loop3: detected capacity change from 0 to 1024 [ 86.772837][ T6566] syz.1.606: attempt to access beyond end of device [ 86.772837][ T6566] loop1: rw=2049, sector=145, nr_sectors = 704 limit=128 [ 86.783633][ T6568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.842357][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 86.870345][ T6565] syz.1.606: attempt to access beyond end of device [ 86.870345][ T6565] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 86.876683][ T6574] binder: 6573:6574 ioctl c0306201 20000080 returned -14 [ 86.907680][ T6574] binder: 6573:6574 ioctl 89f3 0 returned -22 [ 86.908820][ T6574] binder: 6573:6574 got reply transaction with no transaction stack [ 86.910015][ T6574] binder: 6573:6574 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2946 [ 86.916583][ T6198] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.573571][ T6589] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 87.671263][ T6621] loop3: detected capacity change from 0 to 256 [ 87.672683][ T6621] exfat: Deprecated parameter 'utf8' [ 87.679562][ T6621] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 88.101363][ T6628] loop3: detected capacity change from 0 to 8192 [ 88.107997][ T6628] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.183429][ T6635] loop0: detected capacity change from 0 to 1024 [ 88.194702][ T6637] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 88.251456][ T6639] tipc: Enabling of bearer rejected, already enabled [ 88.484104][ T6664] use of bytesused == 0 is deprecated and will be removed in the future, [ 88.493647][ T6664] use the actual size instead. [ 88.939758][ T6675] loop1: detected capacity change from 0 to 8 [ 88.945338][ T6675] SQUASHFS error: lzo decompression failed, data probably corrupt [ 88.947559][ T6675] SQUASHFS error: Failed to read block 0x91: -5 [ 88.948782][ T6675] SQUASHFS error: Unable to read metadata cache entry [8f] [ 88.950010][ T6675] SQUASHFS error: Unable to read inode 0x11f [ 88.979101][ T5087] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.215446][ T6675] loop1: detected capacity change from 0 to 32768 [ 89.243539][ T6675] XFS (loop1): Mounting V5 Filesystem [ 89.272375][ T6675] XFS (loop1): Ending clean mount [ 89.340194][ T4322] XFS (loop1): Unmounting Filesystem [ 89.543237][ T6695] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.549456][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.551928][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.953212][ T6702] binder: 6701:6702 ioctl 4018620d 0 returned -22 [ 89.963153][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.972393][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.037768][ T6693] loop5: detected capacity change from 0 to 40427 [ 90.039947][ T6693] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(512) [ 90.051584][ T6693] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 90.053182][ T6693] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 90.054504][ T6693] F2FS-fs (loop5): old and new quota format mixing [ 90.071269][ T6707] binder: 6705:6707 ioctl c0306201 20000080 returned -14 [ 90.086446][ T6707] binder: 6705:6707 tried to acquire reference to desc 0, got 1 instead [ 90.087992][ T6707] binder: 6705:6707 got transaction with invalid parent offset [ 90.089167][ T6707] binder: 6707:6705 failed to fixup parent [ 90.097741][ T6707] binder: 6705:6707 transaction async to 6705:0 failed 18/29201/-22, size 120-24 line 3540 [ 90.103289][ T6711] loop4: detected capacity change from 0 to 2048 [ 90.109435][ T6198] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.137609][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 90.180310][ T6718] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.192282][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.193555][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.220868][ T6711] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 90.228715][ T6711] Remounting filesystem read-only [ 90.229964][ T6711] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 90.260427][ T4324] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 91.109102][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.287112][ T6737] loop4: detected capacity change from 0 to 40427 [ 91.290436][ T6737] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.291639][ T6737] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.293784][ T6737] F2FS-fs (loop4): invalid crc value [ 91.298604][ T6737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.313519][ T6737] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.314688][ T6737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.325723][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 91.328425][ T14] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 91.329689][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.331074][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.332461][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.344330][ T14] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.364421][ T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.366394][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.743386][ T14] usb 1-1: usb_control_msg returned -32 [ 91.744307][ T14] usbtmc 1-1:16.0: can't read capabilities [ 92.257507][ T6773] device syzkaller0 entered promiscuous mode [ 92.450652][ T6783] usbtmc 1-1:16.0: INDICATOR_PULSE returned 0 [ 93.076295][ T6796] vxfs: WRONG superblock magic 00000000 at 1 [ 93.078493][ T6796] vxfs: WRONG superblock magic 00000000 at 8 [ 93.079490][ T6796] vxfs: can't find superblock. [ 93.322257][ T4388] libceph: connect (1)[c::]:6789 error -101 [ 93.325441][ T4388] libceph: mon0 (1)[c::]:6789 connect error [ 93.597487][ T4388] libceph: connect (1)[c::]:6789 error -101 [ 93.600091][ T4388] libceph: mon0 (1)[c::]:6789 connect error [ 93.640226][ T6793] ceph: No mds server is up or the cluster is laggy [ 93.649124][ T6808] process 'syz.1.689' launched './file1' with NULL argv: empty string added [ 93.747333][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 93.842068][ T6499] usb 1-1: USB disconnect, device number 3 [ 94.353863][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 95.435516][ T6860] device batadv_slave_1 entered promiscuous mode [ 95.440216][ T6859] device batadv_slave_1 left promiscuous mode [ 95.573045][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 95.710264][ T6868] loop5: detected capacity change from 0 to 65536 [ 95.757059][ T6868] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 95.758612][ T6868] XFS (loop5): Mounting V5 Filesystem [ 95.798419][ T6868] XFS (loop5): Ending clean mount [ 95.799809][ T6868] XFS (loop5): Quotacheck needed: Please wait. [ 95.820159][ T6868] XFS (loop5): Quotacheck: Done. [ 95.853653][ T6847] delete_channel: no stack [ 95.855060][ T6865] loop4: detected capacity change from 0 to 32768 [ 95.859737][ T6865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.712 (6865) [ 95.886704][ T6865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.888675][ T6865] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 95.890170][ T6865] BTRFS info (device loop4): using free space tree [ 96.413415][ T4744] XFS (loop5): Unmounting Filesystem [ 96.445053][ T6865] BTRFS info (device loop4): enabling ssd optimizations [ 96.452707][ T6865] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.392293][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 97.397263][ T6933] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 97.440367][ T6935] loop5: detected capacity change from 0 to 128 [ 97.447806][ T6937] loop1: detected capacity change from 0 to 256 [ 97.470494][ T6937] FAT-fs (loop1): Directory bread(block 64) failed [ 97.474945][ T6937] FAT-fs (loop1): Directory bread(block 65) failed [ 97.478098][ T6937] FAT-fs (loop1): Directory bread(block 66) failed [ 97.481837][ T6937] FAT-fs (loop1): Directory bread(block 67) failed [ 97.482891][ T6937] FAT-fs (loop1): Directory bread(block 68) failed [ 97.483890][ T6937] FAT-fs (loop1): Directory bread(block 69) failed [ 97.492043][ T6937] FAT-fs (loop1): Directory bread(block 70) failed [ 97.493136][ T6937] FAT-fs (loop1): Directory bread(block 71) failed [ 97.494145][ T6937] FAT-fs (loop1): Directory bread(block 72) failed [ 97.501831][ T6937] FAT-fs (loop1): Directory bread(block 73) failed [ 97.554078][ T6942] loop0: detected capacity change from 0 to 512 [ 97.577684][ T6942] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.729: inode has both inline data and extents flags [ 97.579863][ T6942] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.729: couldn't read orphan inode 15 (err -117) [ 97.581792][ T6942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.122215][ T6970] loop1: detected capacity change from 0 to 4096 [ 98.154948][ T6970] ntfs3: loop1: ino=3, Correct links count -> 2. [ 98.163974][ T6960] loop3: detected capacity change from 0 to 32768 [ 98.164135][ T6970] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 98.169975][ T6960] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 98.171514][ T6960] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 98.190354][ T6960] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 98.195266][ T6497] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 98.197384][ T6497] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 98.243833][ T6497] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 98.257846][ T6497] gfs2: fsid=syz:syz.0: jid=0: Done [ 98.263129][ T6960] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 98.617838][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 98.779965][ T6982] loop1: detected capacity change from 0 to 32768 [ 98.782492][ T6982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.743 (6982) [ 98.785589][ T6982] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.787141][ T6982] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 98.788340][ T6982] BTRFS info (device loop1): using free space tree [ 98.897825][ T7006] loop0: detected capacity change from 0 to 256 [ 98.899121][ T7006] exfat: Deprecated parameter 'namecase' [ 98.904601][ T7006] exfat: Deprecated parameter 'utf8' [ 98.911881][ T7004] loop5: detected capacity change from 0 to 4096 [ 98.919903][ T7006] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 98.930278][ T6982] BTRFS info (device loop1): enabling ssd optimizations [ 98.936850][ T7004] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 98.951310][ T7004] UDF-fs: Scanning with blocksize 512 failed [ 98.971676][ T7004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.072429][ T4322] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.531902][ T7026] loop0: detected capacity change from 0 to 128 [ 99.628416][ T7026] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 99.686654][ T7026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.690346][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 99.714612][ T7030] bridge1: port 1(ip6gretap1) entered blocking state [ 99.720298][ T7030] bridge1: port 1(ip6gretap1) entered disabled state [ 99.723050][ T7030] device ip6gretap1 entered promiscuous mode [ 99.764767][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 99.808103][ T7040] misc userio: No port type given on /dev/userio [ 99.843963][ T7043] loop5: detected capacity change from 0 to 4096 [ 99.879166][ T7043] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 100.239348][ T7048] netlink: 'syz.0.758': attribute type 3 has an invalid length. [ 100.641777][ T5585] hid-generic FFFF:0008:0003.0003: item fetching failed at offset 0/2 [ 100.648010][ T5585] hid-generic: probe of FFFF:0008:0003.0003 failed with error -22 [ 100.681958][ T7043] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 100.687637][ T7043] ntfs3: loop5: Failed to load root. [ 101.556578][ T7058] hub 2-0:1.0: USB hub found [ 101.557461][ T7058] hub 2-0:1.0: 8 ports detected [ 101.810794][ T7061] loop1: detected capacity change from 0 to 32768 [ 101.812449][ T7061] XFS: ikeep mount option is deprecated. [ 101.815954][ T7061] XFS: attr2 mount option is deprecated. [ 101.818053][ T7061] xfs: Bad value for 'swidth' [ 102.265489][ T7088] loop1: detected capacity change from 0 to 4096 [ 102.367132][ T7089] random: crng reseeded on system resumption [ 102.374743][ T7089] Restarting kernel threads ... done. [ 102.660255][ T7080] loop5: detected capacity change from 0 to 40427 [ 102.675262][ T7080] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 102.711676][ T7097] loop0: detected capacity change from 0 to 512 [ 102.713469][ T7097] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.717341][ T7097] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 102.837817][ T7107] 9pnet: Unknown protocol version 9 [ 102.848807][ T7105] loop4: detected capacity change from 0 to 1024 [ 102.859884][ T7105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.898470][ T7105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.959413][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.973637][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.037606][ T7120] loop1: detected capacity change from 0 to 64 [ 103.048298][ T7120] hfs: unable to locate alternate MDB [ 103.049391][ T7120] hfs: continuing without an alternate MDB [ 103.070179][ T7097] loop0: detected capacity change from 0 to 32768 [ 103.369701][ T7097] JBD2: Ignoring recovery information on journal [ 103.448424][ T7097] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.506115][ T4320] ocfs2: Unmounting device (7,0) on (node local) [ 103.681565][ T4324] EXT4-fs (loop4): unmounting filesystem. [ 103.683671][ T7142] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 103.703317][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 103.710166][ T7142] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.913031][ T7161] input: syz1 as /devices/virtual/input/input2 [ 104.008824][ T5087] udevd[5087]: setting owner of /dev/input/event2 to uid=0, gid=103 failed: No such file or directory [ 104.049378][ T7159] loop0: detected capacity change from 0 to 32768 [ 104.055401][ T7159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.804 (7159) [ 104.067294][ T7159] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.069987][ T7159] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 104.071490][ T7159] BTRFS info (device loop0): using free space tree [ 104.204553][ T7159] BTRFS info (device loop0): enabling ssd optimizations [ 104.782645][ T7194] loop3: detected capacity change from 0 to 2048 [ 104.818870][ T7194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.858716][ T4320] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.165205][ T7209] netlink: 'syz.5.814': attribute type 4 has an invalid length. [ 106.623034][ T7227] loop4: detected capacity change from 0 to 2048 [ 107.372427][ T7231] loop1: detected capacity change from 0 to 1764 [ 107.376348][ T7228] loop5: detected capacity change from 0 to 32768 [ 107.438547][ T7233] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 107.458137][ T7228] (syz.5.819,7228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.471987][ T7228] (syz.5.819,7228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 107.481708][ T7233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.513064][ T7235] bond1: (slave geneve2): making interface the new active one [ 107.516005][ T7228] (syz.5.819,7228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x44d2ffae. Applying ECC. [ 107.518383][ T7228] (syz.5.819,7228,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x6e07a1db [ 107.520311][ T7228] (syz.5.819,7228,0):ocfs2_validate_inode_block:1382 ERROR: Checksum failed for dinode 25 [ 107.523399][ T7228] (syz.5.819,7228,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 107.524971][ T7228] (syz.5.819,7228,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 107.552189][ T7228] (syz.5.819,7228,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 107.575811][ T7235] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 107.577303][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 107.579295][ T7228] (syz.5.819,7228,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 107.579321][ T7228] (syz.5.819,7228,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 107.584138][ T7227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359 [ 107.616531][ T7228] (syz.5.819,7228,0):ocfs2_initialize_super:2255 ERROR: status = -22 [ 107.617876][ T7228] (syz.5.819,7228,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 107.704469][ T7227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.098311][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 108.368019][ T7283] x_tables: duplicate underflow at hook 1 [ 108.690075][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 108.691616][ T7289] netlink: 'syz.3.843': attribute type 2 has an invalid length. [ 108.701250][ T7290] loop4: detected capacity change from 0 to 512 [ 108.711534][ T7290] EXT4-fs: Ignoring removed orlov option [ 108.723192][ T7290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.764562][ C0] vcan0: j1939_tp_rxtimer: 0x000000009004d93d: rx timeout, send abort [ 108.784315][ T7290] EXT4-fs (loop4): 1 orphan inode deleted [ 108.862941][ T7290] EXT4-fs (loop4): 1 truncate cleaned up [ 108.863807][ T7290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.878301][ T7290] EXT4-fs error (device loop4): empty_inline_dir:1885: inode #12: block 7: comm syz.4.841: bad entry in directory: rec_len is too small for name_len - offset=4, inode=13, rec_len=16, size=60 fake=0 [ 108.889912][ T7290] EXT4-fs (loop4): Remounting filesystem read-only [ 108.891708][ T7290] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 13, rec_len 16, name_len 53inline size 60 [ 109.233097][ T4324] EXT4-fs (loop4): unmounting filesystem. [ 109.266817][ C0] vcan0: j1939_tp_rxtimer: 0x000000009004d93d: abort rx timeout. Force session deactivation [ 109.391421][ T7320] loop1: detected capacity change from 0 to 4096 [ 109.399434][ T7320] ntfs3: loop1: ino=3, Correct links count -> 2. [ 109.436943][ T7323] loop5: detected capacity change from 0 to 128 [ 109.438390][ T7323] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.448142][ T7323] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.451955][ T7320] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.858196][ T4744] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 109.859683][ T4744] FAT-fs (loop5): Filesystem has been set read-only [ 109.861161][ T4744] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 110.390854][ T7341] loop1: detected capacity change from 0 to 40427 [ 110.403433][ T7341] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(3199) blocks(1024) [ 110.404979][ T7341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.424040][ T7341] F2FS-fs (loop1): invalid crc value [ 110.458966][ T7341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.510043][ T7341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.511176][ T7341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.084785][ T7362] loop1: detected capacity change from 0 to 64 [ 111.140740][ T7356] loop3: detected capacity change from 0 to 32768 [ 111.142657][ T7356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.868 (7356) [ 111.190917][ T7356] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.192674][ T7356] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 111.194025][ T7356] BTRFS info (device loop3): using free space tree [ 111.212791][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.217648][ T4329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.220696][ T4329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.223139][ T4329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.224626][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.228048][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.629358][ T7356] BTRFS info (device loop3): enabling ssd optimizations [ 111.648149][ T4319] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.921109][ T7407] loop3: detected capacity change from 0 to 8192 [ 112.008943][ T7407] loop3: p1 p2 [ 112.009612][ T7407] loop3: partition table partially beyond EOD, truncated [ 112.014219][ T7407] loop3: p1 start 16777216 is beyond EOD, truncated [ 112.015280][ T7407] loop3: p2 size 515840 extends beyond EOD, truncated [ 112.018250][ T7369] chnl_net:caif_netlink_parms(): no params data found [ 112.390752][ T5087] udevd[5087]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 112.456450][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.458211][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.459796][ T7369] device bridge_slave_0 entered promiscuous mode [ 112.464216][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.469136][ T7432] binder: 7431:7432 tried to acquire reference to desc 0, got 1 instead [ 112.475449][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.477757][ T7369] device bridge_slave_1 entered promiscuous mode [ 112.485996][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.488829][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.788995][ T7436] loop3: detected capacity change from 0 to 4096 [ 112.790369][ T7436] ntfs3: Unknown parameter '/dev/ptmx' [ 112.800181][ T7437] binder: 7431:7437 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.805659][ T7437] binder: 7437 RLIMIT_NICE not set [ 112.806455][ T7437] binder: 7437 RLIMIT_NICE not set [ 112.807486][ T7437] binder: 7437 RLIMIT_NICE not set [ 112.813733][ T7369] team0: Port device team_slave_0 added [ 112.830214][ T7369] team0: Port device team_slave_1 added [ 112.832899][ T4313] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.844857][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.852404][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.852906][ T6198] binder: undelivered TRANSACTION_COMPLETE [ 112.880981][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.888371][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.890730][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.897874][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.977959][ T7369] device hsr_slave_0 entered promiscuous mode [ 113.015995][ T7369] device hsr_slave_1 entered promiscuous mode [ 113.055618][ T7369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.056956][ T7369] Cannot create hsr debugfs directory [ 113.191012][ T7369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.217131][ T6198] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.227767][ T7369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.235965][ T7455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.894'. [ 113.257062][ T7369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.275596][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 113.297420][ T7369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.384053][ T7465] loop1: detected capacity change from 0 to 512 [ 113.386254][ T7465] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.401052][ T7465] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 113.406015][ T6198] usb 1-1: Using ep0 maxpacket: 8 [ 113.419020][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.422861][ T6198] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.424329][ T6198] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.426923][ T7465] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.896: inode #15: comm syz.1.896: iget: illegal inode # [ 113.429510][ T7465] EXT4-fs (loop1): Remounting filesystem read-only [ 113.430448][ T7465] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.896: couldn't read orphan inode 15 (err -117) [ 113.432261][ T6198] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.433811][ T6198] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.439339][ T7465] EXT4-fs (loop1): Remounting filesystem read-only [ 113.440254][ T7465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.447151][ T6198] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.458537][ T6198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.470473][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.471628][ T7470] loop4: detected capacity change from 0 to 256 [ 113.473278][ T7470] exfat: Deprecated parameter 'utf8' [ 113.474115][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.480170][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.482677][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.484561][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.486598][ T4991] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.487658][ T4991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.490754][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 113.496518][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.498843][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.500069][ T7470] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 113.502350][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.505222][ T4991] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.506443][ T4991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.512775][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.517865][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.531507][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.534873][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.541625][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.543311][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.548522][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.558864][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.563186][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.568848][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.658176][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.659475][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.661853][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.677488][ T6198] usb 1-1: GET_CAPABILITIES returned 0 [ 113.678553][ T6198] usbtmc 1-1:16.0: can't read capabilities [ 113.773442][ T7476] loop4: detected capacity change from 0 to 40427 [ 113.779726][ T7476] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.780969][ T7476] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.784505][ T7476] F2FS-fs (loop4): invalid crc value [ 113.799640][ T7476] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.801467][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.810262][ T7369] device veth0_vlan entered promiscuous mode [ 113.813465][ T7369] device veth1_vlan entered promiscuous mode [ 113.815273][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.817227][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.987755][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.037015][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.092432][ T7476] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.093595][ T7476] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.103892][ T5585] usb 1-1: USB disconnect, device number 4 [ 114.117236][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.119685][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.122350][ T7369] device veth0_macvtap entered promiscuous mode [ 114.125456][ T7369] device veth1_macvtap entered promiscuous mode [ 114.134842][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.136516][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.137904][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.139407][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.140817][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.149513][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.151077][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.152687][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.154946][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.157914][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.159721][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.161435][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.163100][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.171060][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.173412][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.174984][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.178481][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.180172][ T7369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.182455][ T7369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.188038][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.189469][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.191190][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.194695][ T7369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.198765][ T7369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.200202][ T7369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.201543][ T7369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.262463][ T5005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.266776][ T5005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.271973][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.277066][ T5005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.278505][ T5005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.282641][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.348520][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.349938][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.825021][ T4330] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.923904][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 115.367884][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 115.694532][ T7526] loop6: detected capacity change from 0 to 764 [ 115.892804][ T7536] loop6: detected capacity change from 0 to 32768 [ 115.948954][ T7536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.916 (7536) [ 116.172395][ T7536] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.173980][ T7536] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 116.175303][ T7536] BTRFS info (device loop6): enabling ssd optimizations [ 116.176548][ T7536] BTRFS info (device loop6): using spread ssd allocation scheme [ 116.177707][ T7536] BTRFS info (device loop6): turning off barriers [ 116.178713][ T7536] BTRFS info (device loop6): turning on flush-on-commit [ 116.179873][ T7536] BTRFS error (device loop6): unrecognized commit_interval value 0x0000000080000000 [ 116.184371][ T7536] BTRFS error (device loop6): open_ctree failed: -22 [ 116.402381][ T7552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.403955][ T7552] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 116.762142][ T5087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (5087) [ 117.455719][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 117.601718][ T7587] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 117.809233][ T7601] loop2: detected capacity change from 0 to 7 [ 117.810990][ T5087] loop2: [ 117.811611][ T5087] loop2: partition table partially beyond EOD, truncated [ 117.818589][ T7601] loop2: [ 117.819108][ T7601] loop2: partition table partially beyond EOD, truncated [ 118.339582][ T7623] 9pnet_fd: Insufficient options for proto=fd [ 118.395032][ T7627] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 118.580611][ T7634] loop4: detected capacity change from 0 to 128 [ 118.674375][ T7630] loop3: detected capacity change from 0 to 40427 [ 118.692071][ T7630] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 119.012424][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.033005][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.458928][ T7657] loop6: detected capacity change from 0 to 1024 [ 119.473088][ T7659] loop4: detected capacity change from 0 to 4096 [ 119.515836][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 119.691886][ T7678] tmpfs: Bad value for 'mpol' [ 119.982508][ T7703] loop6: detected capacity change from 0 to 256 [ 120.010622][ T7703] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 120.102174][ T7710] device syzkaller1 entered promiscuous mode [ 120.122092][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.127659][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.883539][ T7720] netlink: 64 bytes leftover after parsing attributes in process `syz.6.986'. [ 121.009201][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 121.251714][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 122.081171][ T7764] device bridge0 entered promiscuous mode [ 122.083077][ T7764] bridge0: port 3(vlan2) entered blocking state [ 122.084066][ T7764] bridge0: port 3(vlan2) entered disabled state [ 122.114688][ T7764] device bridge0 left promiscuous mode [ 122.143550][ T7769] syz.0.1007 sent an empty control message without MSG_MORE. [ 122.837938][ T7786] netlink: 'syz.1.1010': attribute type 7 has an invalid length. [ 122.839163][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 122.863671][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 122.871953][ T7791] loop6: detected capacity change from 0 to 1024 [ 122.873730][ T7791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.875194][ T7791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.890625][ T7791] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 122.892165][ T7791] System zones: 0-1, 3-36 [ 122.897355][ T7791] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 122.950615][ T7797] loop3: detected capacity change from 0 to 2048 [ 122.966431][ T7797] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.996774][ T5087] udevd[5087]: incorrect nilfs2 checksum on /dev/loop3 [ 123.003263][ T7799] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.196799][ T7812] loop3: detected capacity change from 0 to 512 [ 123.199633][ T7812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.205902][ T7812] EXT4-fs (loop3): 1 truncate cleaned up [ 123.206792][ T7812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.883074][ T6499] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.901401][ T7369] EXT4-fs (loop6): unmounting filesystem. [ 123.939526][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.941507][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.997284][ T7821] netlink: 'syz.4.1024': attribute type 1 has an invalid length. [ 124.020191][ T7823] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 124.056855][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 124.058411][ T6499] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.066094][ T6499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.067574][ T6499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.068891][ T6499] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.072674][ T6499] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.074140][ T6499] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.075294][ T6499] usb 1-1: Product: syz [ 124.076602][ T6499] usb 1-1: Manufacturer: syz [ 124.081197][ T6499] cdc_wdm 1-1:1.0: skipping garbage [ 124.082021][ T6499] cdc_wdm 1-1:1.0: skipping garbage [ 124.085064][ T6499] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 124.095652][ T6499] cdc_wdm 1-1:1.0: Unknown control protocol [ 124.186281][ T7835] loop3: detected capacity change from 0 to 128 [ 124.575379][ T7843] loop6: detected capacity change from 0 to 1024 [ 124.596682][ T7843] ext4: Bad value for 'barrier' [ 125.006278][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 125.008512][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 125.009485][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 125.010143][ T4848] usb 1-1: USB disconnect, device number 5 [ 125.010333][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 125.100612][ T7849] tipc: Failed to remove unknown binding: 66,1,1/2886997007:593747333/593747335 [ 125.171210][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 125.172816][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 125.178423][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 125.181987][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 125.315699][ T7873] loop3: detected capacity change from 0 to 1024 [ 125.349525][ T7873] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.369508][ T11] [ 125.369944][ T11] ====================================================== [ 125.370949][ T11] WARNING: possible circular locking dependency detected [ 125.372052][ T11] syzkaller #0 Not tainted [ 125.372683][ T11] ------------------------------------------------------ [ 125.373665][ T11] kworker/u4:1/11 is trying to acquire lock: [ 125.374625][ T11] ffff0000e07f3cf8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x30/0x11c [ 125.376111][ T11] [ 125.376111][ T11] but task is already holding lock: [ 125.377148][ T11] ffff0000f98ccb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 125.378752][ T11] [ 125.378752][ T11] which lock already depends on the new lock. [ 125.378752][ T11] [ 125.380206][ T11] [ 125.380206][ T11] the existing dependency chain (in reverse order) is: [ 125.381524][ T11] [ 125.381524][ T11] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 125.382791][ T11] percpu_down_read+0x70/0x2a8 [ 125.383543][ T11] ext4_writepages+0x188/0x284c [ 125.384369][ T11] do_writepages+0x2c0/0x4fc [ 125.385084][ T11] __writeback_single_inode+0x164/0x157c [ 125.385946][ T11] writeback_single_inode+0x1c0/0x720 [ 125.386781][ T11] write_inode_now+0x144/0x1b0 [ 125.387571][ T11] iput+0x5cc/0x7f4 [ 125.388217][ T11] ext4_xattr_block_set+0x17a4/0x2810 [ 125.389098][ T11] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 125.390061][ T11] __ext4_expand_extra_isize+0x298/0x358 [ 125.391045][ T11] __ext4_mark_inode_dirty+0x3e4/0x790 [ 125.391942][ T11] ext4_evict_inode+0xb58/0x1270 [ 125.392726][ T11] evict+0x3c8/0x810 [ 125.393396][ T11] iput+0x764/0x7f4 [ 125.394022][ T11] ext4_process_orphan+0x240/0x2b4 [ 125.394859][ T11] ext4_orphan_cleanup+0x908/0x104c [ 125.395733][ T11] ext4_fill_super+0x6440/0x68a8 [ 125.396564][ T11] get_tree_bdev+0x358/0x544 [ 125.397330][ T11] ext4_get_tree+0x28/0x38 [ 125.398062][ T11] vfs_get_tree+0x90/0x274 [ 125.398838][ T11] do_new_mount+0x228/0x810 [ 125.399593][ T11] path_mount+0x5b4/0xe78 [ 125.400300][ T11] __arm64_sys_mount+0x49c/0x584 [ 125.401103][ T11] invoke_syscall+0x98/0x2bc [ 125.401832][ T11] el0_svc_common+0x138/0x258 [ 125.402582][ T11] do_el0_svc+0x58/0x13c [ 125.403304][ T11] el0_svc+0x58/0x138 [ 125.403933][ T11] el0t_64_sync_handler+0x84/0xf0 [ 125.404725][ T11] el0t_64_sync+0x18c/0x190 [ 125.405441][ T11] [ 125.405441][ T11] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 125.406544][ T11] __lock_acquire+0x293c/0x6544 [ 125.407279][ T11] lock_acquire+0x20c/0x644 [ 125.407999][ T11] down_write+0x5c/0x88 [ 125.408675][ T11] ext4_destroy_inline_data+0x30/0x11c [ 125.409619][ T11] ext4_writepages+0x3f4/0x284c [ 125.410381][ T11] do_writepages+0x2c0/0x4fc [ 125.411086][ T11] __writeback_single_inode+0x164/0x157c [ 125.412034][ T11] writeback_sb_inodes+0x824/0x1404 [ 125.412860][ T11] wb_writeback+0x400/0xfb0 [ 125.413572][ T11] wb_workfn+0x34c/0xd98 [ 125.414278][ T11] process_one_work+0x7f4/0x13a8 [ 125.415087][ T11] worker_thread+0x8c8/0xfbc [ 125.415775][ T11] kthread+0x250/0x2d8 [ 125.416506][ T11] ret_from_fork+0x10/0x20 [ 125.417285][ T11] [ 125.417285][ T11] other info that might help us debug this: [ 125.417285][ T11] [ 125.418789][ T11] Possible unsafe locking scenario: [ 125.418789][ T11] [ 125.419868][ T11] CPU0 CPU1 [ 125.420686][ T11] ---- ---- [ 125.421498][ T11] lock(&sbi->s_writepages_rwsem); [ 125.422292][ T11] lock(&ei->xattr_sem); [ 125.423295][ T11] lock(&sbi->s_writepages_rwsem); [ 125.424503][ T11] lock(&ei->xattr_sem); [ 125.425122][ T11] [ 125.425122][ T11] *** DEADLOCK *** [ 125.425122][ T11] [ 125.426275][ T11] 3 locks held by kworker/u4:1/11: [ 125.426987][ T11] #0: ffff0000c0c48938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 125.428517][ T11] #1: ffff80001c887c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 125.430307][ T11] #2: ffff0000f98ccb98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 125.431787][ T11] [ 125.431787][ T11] stack backtrace: [ 125.432623][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 125.433666][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 125.435085][ T11] Workqueue: writeback wb_workfn (flush-7:3) [ 125.435949][ T11] Call trace: [ 125.436411][ T11] dump_backtrace+0x1c8/0x1f4 [ 125.437107][ T11] show_stack+0x2c/0x3c [ 125.437700][ T11] __dump_stack+0x30/0x40 [ 125.438356][ T11] dump_stack_lvl+0xf8/0x160 [ 125.439041][ T11] dump_stack+0x1c/0x5c [ 125.439649][ T11] print_circular_bug+0x148/0x1b0 [ 125.440353][ T11] check_noncircular+0x240/0x2d4 [ 125.441062][ T11] __lock_acquire+0x293c/0x6544 [ 125.441764][ T11] lock_acquire+0x20c/0x644 [ 125.442396][ T11] down_write+0x5c/0x88 [ 125.442977][ T11] ext4_destroy_inline_data+0x30/0x11c [ 125.443752][ T11] ext4_writepages+0x3f4/0x284c [ 125.444581][ T11] do_writepages+0x2c0/0x4fc [ 125.445250][ T11] __writeback_single_inode+0x164/0x157c [ 125.446041][ T11] writeback_sb_inodes+0x824/0x1404 [ 125.446806][ T11] wb_writeback+0x400/0xfb0 [ 125.447446][ T11] wb_workfn+0x34c/0xd98 [ 125.448054][ T11] process_one_work+0x7f4/0x13a8 [ 125.448797][ T11] worker_thread+0x8c8/0xfbc [ 125.449468][ T11] kthread+0x250/0x2d8 [ 125.450088][ T11] ret_from_fork+0x10/0x20 [ 125.457354][ T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 125.460137][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.462045][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.462045][ T11] [ 125.463413][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 125.464445][ T11] EXT4-fs (loop3): Free/Dirty block details [ 125.465406][ T11] EXT4-fs (loop3): free_blocks=68451041280 [ 125.467607][ T11] EXT4-fs (loop3): dirty_blocks=32 [ 125.468347][ T11] EXT4-fs (loop3): Block reservation details [ 125.469209][ T11] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 125.470579][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 125.572381][ T7883] loop3: detected capacity change from 0 to 2048 [ 125.587919][ T7883] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 125.595163][ T7883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.915947][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.916992][ T2060] ieee802154 phy1 wpan1: encryption failed: -22