last executing test programs: 21.55951474s ago: executing program 3 (id=698): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@dioread_nolock}, {@user_xattr}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@auto_da_alloc}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x43a, &(0x7f00000008c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 20.994203037s ago: executing program 3 (id=700): socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x200, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendfile(r1, r0, 0x0, 0xfffffffc) 19.897077796s ago: executing program 0 (id=702): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x380000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r2) recvmsg$unix(r0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x5c9, r1, &(0x7f0000000540)="2e8c94325d3d8d485c3afdeb793a373fe2689bf26813b54a890f8a2a8a6a684f66485e5eb58a286eb69cea9a6a970d33a4071ffd21669f4243eff1e0c4ad5d7276de45e214625b042390e143610ecf60c0160930b4ac3991c82c71b47d8dd601b2567cfaf5a69f07c32ea3a5af24b1e45550c5dd5f9ffe6829f21d343465ea4647966e6260a70c0b0405525b468ac25eb89296f1ca6e7df25d44a37c99e3c84ef9bd5bc88ec26d17538db8cabf453deb2986d6fad92b4e019bb00ed921368ef543f9dc", 0xc3, 0x1, 0x0, 0x1}, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x14008, &(0x7f0000000340)={[{@creator={'creator', 0x3d, "0100"}}, {@part={'part', 0x3d, 0xffffffffffffffff}}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {}, {@part={'part', 0x3d, 0x7ffe}}]}, 0xff, 0x2e9, &(0x7f00000008c0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback={0xffffff88}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xa4}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5248b}}, 0x20}}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "0000b50800000000"}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) 19.770081737s ago: executing program 3 (id=703): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000840), &(0x7f0000000c80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fc_commit_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) 19.592748334s ago: executing program 3 (id=704): open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 19.457821744s ago: executing program 0 (id=706): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)="a56967b4b09a9da046a55a8fcde30fa52f4259e812", 0x0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x5dc}], 0x1) 19.190552516s ago: executing program 3 (id=708): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x4000) 6.001221533s ago: executing program 4 (id=772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_disconnect(r0) 5.004547047s ago: executing program 2 (id=773): r0 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SHUTDOWN={0x22, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r3}, 0x10) io_uring_enter(r0, 0x2dbe, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x2000000) r5 = socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)=0x81) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000048c0)={0x0, 0x0}, &(0x7f0000006780)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000067c0)={{{@in=@broadcast, @in=@empty, 0x4e20, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x33, 0x0, r7}, {0x1000, 0x3, 0x7, 0x400, 0x9, 0x7fff, 0x8, 0xffffffffffffff52}, {0x8000000000000000, 0x8000000000000001, 0x4, 0xffffffffffff0001}, 0x8, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0x0, @in=@multicast1, 0x3504, 0x4, 0x0, 0x0, 0x5c1, 0xfffffff8, 0x401}}, 0xe8) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0x5}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001ec0)={0x0, 0xa0, &(0x7f0000000c40)=[@in6={0xa, 0x4e20, 0xda4, @local, 0x7}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x4000000}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @private0, 0x800}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x2}]}, &(0x7f0000000200)=0x10) shutdown(0xffffffffffffffff, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)="e5d8b765618e70313b14cadb6ea442b6157088b6a2944c0f8ee0c5c44a1666fb0aa9f9d49b9dd68dbb6c2b3ecf0706d6f6367cd66443473953dbe17704dacacc3cb8264fe5211ab3da304540a8062736880ff3ccca94fa2fe9ad8dfcd9d9953b965a58646f656d5b7b619219de6194dad792bbef2cdd", 0x76}, 0x68) syz_usb_control_io$hid(r8, &(0x7f0000001280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="aefc0000a578516ac9972000000000000000f6773219b51b0c8bcdb3090c010044223e41d400ada4699cd508dfe40010ff11"]) 4.536400169s ago: executing program 1 (id=774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x80, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x0) shmget(0x1, 0xffffffffff000, 0x0, &(0x7f0000ffb000/0x3000)=nil) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_pidfd_open(r1, 0x0) process_mrelease(r4, 0x0) 3.255397017s ago: executing program 4 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 3.003203526s ago: executing program 1 (id=776): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000800ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0) 2.920338129s ago: executing program 4 (id=777): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x1000000, 0x4) 2.819096214s ago: executing program 4 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5, 0x1, '^'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "efde9602c1d3eddc787a5546953c4762f3834bbfa85a"}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.771030522s ago: executing program 4 (id=779): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.768785522s ago: executing program 1 (id=780): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) mount(0x0, 0x0, 0x0, 0x109005, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248a}) 2.657912079s ago: executing program 1 (id=781): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.597251279s ago: executing program 0 (id=707): unshare(0x22000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0xfffffff0}) 2.492347374s ago: executing program 1 (id=782): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) 2.444258652s ago: executing program 0 (id=783): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_disconnect(r0) 2.172032324s ago: executing program 3 (id=709): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14800, &(0x7f0000000140), 0x1, 0x98e1, &(0x7f0000000680)="$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") 1.81443726s ago: executing program 4 (id=784): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r0, &(0x7f0000001180)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x29, 0x32}], 0x18}], 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000), 0x40) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040050) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="000000000100"}) 1.03355532s ago: executing program 2 (id=785): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x21082d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) 713.54328ms ago: executing program 2 (id=786): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x1000000, 0x4) 633.786362ms ago: executing program 1 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 586.010139ms ago: executing program 2 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5, 0x1, '^'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "efde9602c1d3eddc787a5546953c4762f3834bbfa85a"}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x0) 443.118501ms ago: executing program 2 (id=789): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x80000039bc, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/21, 0x15}}], 0x1, 0x2060, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000380)=""/112, 0x70}], 0x1, 0x44, 0x0) 233.872313ms ago: executing program 2 (id=790): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000440)="15", 0x1}, {&(0x7f0000000040)="1f", 0x1}, {&(0x7f0000000640)="53876165c1d64b3887ff159308d6febc9954f948cc8fa7840b77e7307713bb79421767160fcfea47a86385f1c41de6af43519550f3a01fd3989d2bbd77da22aec98ee3e289f8d652f918326ee6300083bdba0e4646e9b90bea606137246fa9a6f1aad3a3cbe84020ff6aa2f2ebcb33c25c772e40699aaa0dd14d1ad7fe4e058e747ad0bd87692ae975", 0x89}, {&(0x7f0000001840)='u', 0x1}, {&(0x7f0000001900)="d3", 0x1}], 0x5) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x2) 66.763219ms ago: executing program 0 (id=791): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=792): unshare(0x22000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0xfffffff0}) kernel console output (not intermixed with test programs): istering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.403664][ T4700] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.429292][ T4700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.470052][ T4681] device hsr_slave_0 entered promiscuous mode [ 116.514339][ T4681] device hsr_slave_1 entered promiscuous mode [ 116.535580][ T4681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.543420][ T4681] Cannot create hsr debugfs directory [ 116.586393][ T3705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.621126][ T4700] attempt to access beyond end of device [ 116.621126][ T4700] loop2: rw=2049, want=45104, limit=40427 [ 116.656907][ T4700] attempt to access beyond end of device [ 116.656907][ T4700] loop2: rw=2049, want=45112, limit=40427 [ 116.667051][ T3502] XFS (loop1): Unmounting Filesystem [ 116.773713][ T3705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.606561][ T4307] attempt to access beyond end of device [ 117.606561][ T4307] loop2: rw=2049, want=45128, limit=40427 [ 117.752438][ T3247] Bluetooth: hci1: command 0x041b tx timeout [ 118.179277][ T4725] chnl_net:caif_netlink_parms(): no params data found [ 118.251719][ T4729] loop0: detected capacity change from 0 to 32768 [ 118.454079][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.461235][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.501799][ T4725] device bridge_slave_0 entered promiscuous mode [ 118.644281][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 118.651996][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.666019][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.684008][ T4725] device bridge_slave_1 entered promiscuous mode [ 118.778120][ T4756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 118.809117][ T4756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.273'. [ 118.852414][ T4756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.273'. [ 118.912392][ T4760] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'. [ 118.925905][ T4760] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'. [ 119.032529][ T26] audit: type=1326 audit(1719276458.308:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.0.276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04f6080d39 code=0x0 [ 119.061463][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.242842][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.285004][ T4681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.351776][ T4681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.406708][ T4725] team0: Port device team_slave_0 added [ 119.435819][ T4725] team0: Port device team_slave_1 added [ 119.465323][ T4681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.570908][ T4681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.620319][ T4776] loop2: detected capacity change from 0 to 1024 [ 119.638080][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.646592][ T3504] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 119.656795][ T3504] CPU: 0 PID: 3504 Comm: kworker/u5:1 Not tainted 5.15.161-syzkaller #0 [ 119.662416][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.665150][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.701075][ T3504] Workqueue: hci2 hci_rx_work [ 119.705774][ T3504] Call Trace: [ 119.709055][ T3504] [ 119.712007][ T3504] dump_stack_lvl+0x1e3/0x2d0 [ 119.716689][ T3504] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 119.722321][ T3504] ? panic+0x860/0x860 [ 119.726393][ T3504] ? sysfs_create_dir_ns+0x282/0x390 [ 119.731683][ T3504] sysfs_create_dir_ns+0x2c6/0x390 [ 119.736805][ T3504] ? sysfs_warn_dup+0xa0/0xa0 [ 119.741484][ T3504] ? do_raw_spin_unlock+0x137/0x8b0 [ 119.746689][ T3504] kobject_add_internal+0x6e0/0xe00 [ 119.751897][ T3504] kobject_add+0x14e/0x210 [ 119.756316][ T3504] ? device_add+0x3c2/0xfd0 [ 119.760817][ T3504] ? kobject_init+0x1d0/0x1d0 [ 119.765490][ T3504] ? __raw_spin_lock_init+0x41/0x100 [ 119.770792][ T3504] ? get_device_parent+0x128/0x400 [ 119.775904][ T3504] device_add+0x476/0xfd0 [ 119.780248][ T3504] hci_conn_add_sysfs+0xe4/0x1f0 [ 119.785183][ T3504] le_conn_complete_evt+0xc15/0x1500 [ 119.791082][ T3504] ? cs_le_create_conn+0x5f0/0x5f0 [ 119.796202][ T3504] hci_le_meta_evt+0xd70/0x3df0 [ 119.801062][ T3504] ? __mutex_lock_common+0x444/0x25a0 [ 119.806451][ T3504] ? hci_remote_host_features_evt+0x280/0x280 [ 119.812515][ T3504] ? __mutex_unlock_slowpath+0x218/0x750 [ 119.818165][ T3504] ? hci_event_packet+0x3b4/0x1550 [ 119.823294][ T3504] ? mutex_unlock+0x10/0x10 [ 119.827796][ T3504] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 119.833778][ T3504] ? print_irqtrace_events+0x210/0x210 [ 119.839245][ T3504] hci_event_packet+0xc41/0x1550 [ 119.844190][ T3504] ? rcu_lock_release+0x20/0x20 [ 119.849046][ T3504] ? hci_send_to_monitor+0x99/0x4d0 [ 119.854240][ T3504] hci_rx_work+0x232/0x990 [ 119.858661][ T3504] process_one_work+0x8a1/0x10c0 [ 119.863609][ T3504] ? worker_detach_from_pool+0x260/0x260 [ 119.869259][ T3504] ? _raw_spin_lock_irqsave+0x120/0x120 [ 119.874803][ T3504] ? kthread_data+0x4e/0xc0 [ 119.879308][ T3504] ? wq_worker_running+0x97/0x170 [ 119.884334][ T3504] worker_thread+0xaca/0x1280 [ 119.889032][ T3504] kthread+0x3f6/0x4f0 [ 119.893099][ T3504] ? rcu_lock_release+0x20/0x20 [ 119.897947][ T3504] ? kthread_blkcg+0xd0/0xd0 [ 119.902540][ T3504] ret_from_fork+0x1f/0x30 [ 119.906977][ T3504] [ 119.912463][ T3247] Bluetooth: hci1: command 0x040f tx timeout [ 119.918641][ T3504] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 119.932858][ T3504] Bluetooth: hci2: failed to register connection device [ 119.979489][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.000363][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.042627][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.059115][ T4776] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 120.072765][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.216134][ T4764] loop1: detected capacity change from 0 to 40427 [ 120.244852][ T4776] loop2: detected capacity change from 0 to 1024 [ 120.260739][ T4777] ebt_among: dst integrity fail: 200 [ 120.274337][ T4725] device hsr_slave_0 entered promiscuous mode [ 120.346131][ T4725] device hsr_slave_1 entered promiscuous mode [ 120.383619][ T4725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.391224][ T4725] Cannot create hsr debugfs directory [ 120.412498][ T4764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.592483][ T4764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.762439][ T3549] Bluetooth: hci3: command 0x041b tx timeout [ 121.012161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 121.021091][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 121.030070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 121.038966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 121.047861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 121.188643][ T3595] hfsplus: b-tree write err: -5, ino 4 [ 121.310165][ T3502] attempt to access beyond end of device [ 121.310165][ T3502] loop1: rw=2049, want=45104, limit=40427 [ 121.339776][ T3705] device hsr_slave_0 left promiscuous mode [ 121.359742][ T3705] device hsr_slave_1 left promiscuous mode [ 121.381778][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.429464][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.457628][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.484932][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.505534][ T3705] device bridge_slave_1 left promiscuous mode [ 121.520413][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.567272][ T3705] device bridge_slave_0 left promiscuous mode [ 121.585700][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.621343][ T3705] device veth1_macvtap left promiscuous mode [ 121.650430][ T3705] device veth0_macvtap left promiscuous mode [ 121.661490][ T3705] device veth1_vlan left promiscuous mode [ 121.676174][ T3705] device veth0_vlan left promiscuous mode [ 121.992420][ T4046] Bluetooth: hci1: command 0x0419 tx timeout [ 122.117508][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 122.133685][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 122.149012][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.166452][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.256270][ T3705] bond0 (unregistering): Released all slaves [ 122.463763][ T4681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.486958][ T4725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.516185][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 122.525447][ T4804] netlink: 52 bytes leftover after parsing attributes in process `syz.2.285'. [ 122.536033][ T4804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.285'. [ 122.551170][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.578793][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.623092][ T4725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.656589][ T4681] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.668394][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.678313][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.687178][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.694323][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.703785][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.749102][ T4725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.830933][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.846274][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.861756][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.869403][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.884505][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.974999][ T4725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.032626][ T3552] Bluetooth: hci3: command 0x040f tx timeout [ 123.064908][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.078973][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.098263][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.126721][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.144290][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.153639][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.171318][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.195836][ T4681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.215653][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.225675][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.234990][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.244094][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.312660][ T3247] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.388631][ T4816] loop0: detected capacity change from 0 to 1024 [ 123.411695][ T4725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.512161][ T4725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.554851][ T4725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.562404][ T3247] usb 2-1: Using ep0 maxpacket: 32 [ 123.584268][ T4725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.618254][ T4816] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 123.715602][ T3247] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.744318][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.766376][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.773150][ T4816] loop0: detected capacity change from 0 to 1024 [ 123.781425][ T3247] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.799265][ T4681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.918993][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.938584][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.047110][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.072606][ T3247] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.081688][ T3247] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 124.083316][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.147930][ T3247] usb 2-1: Product: syz [ 124.305501][ T3247] usb 2-1: Manufacturer: syz [ 124.663759][ T3247] hub 2-1:4.0: USB hub found [ 124.807308][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.816347][ T3606] hfsplus: b-tree write err: -5, ino 4 [ 124.819782][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.830321][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.840107][ T4681] device veth0_vlan entered promiscuous mode [ 124.872664][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.880150][ T3247] hub 2-1:4.0: 2 ports detected [ 124.890279][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.936850][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.988741][ T4681] device veth1_vlan entered promiscuous mode [ 125.011341][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.031279][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.051325][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.058485][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.110175][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.121753][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.137931][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.147941][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.155083][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.179954][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.212431][ T3610] Bluetooth: hci3: command 0x0419 tx timeout [ 125.232526][ T4681] device veth0_macvtap entered promiscuous mode [ 125.252979][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.263212][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.274139][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.283122][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.293404][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.309506][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.319789][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.334847][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.348606][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.362943][ T4681] device veth1_macvtap entered promiscuous mode [ 125.390314][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.399778][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.410813][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.421626][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.436082][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.450823][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.487786][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.502777][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.523067][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.544676][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.591326][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.611309][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.630443][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.661733][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.714632][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.764945][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.783766][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.844992][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.865864][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.907087][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.927678][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.945593][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.978797][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.989243][ T4681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.015507][ T4681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.031251][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.047171][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.063428][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.092835][ T4681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.101570][ T4681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.145535][ T4681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.162290][ T4681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.186888][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.195535][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.223735][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.233078][ T3552] hub 2-1:4.0: activate --> -90 [ 126.369031][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.387943][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.428703][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.443232][ T471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.480603][ T471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.506874][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.687007][ T4843] loop2: detected capacity change from 0 to 40427 [ 126.840089][ T4843] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 126.849553][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.854037][ T4843] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 126.863118][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.918505][ T4843] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.010839][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.037352][ T4843] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 127.046086][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.069213][ T4725] device veth0_vlan entered promiscuous mode [ 127.072548][ T4843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.116765][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.135625][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.153042][ T26] audit: type=1804 audit(1719276466.418:13): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.298" name="/root/syzkaller.yaSqjP/21/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 127.188458][ T26] audit: type=1804 audit(1719276466.458:14): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.298" name="/root/syzkaller.yaSqjP/21/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 127.220534][ T4725] device veth1_vlan entered promiscuous mode [ 127.262529][ T3552] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 127.271827][ T4042] usb 2-1: USB disconnect, device number 4 [ 127.358203][ T26] audit: type=1804 audit(1719276466.628:15): pid=4871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.298" name="/root/syzkaller.yaSqjP/21/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 127.387041][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.400867][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.435291][ T4725] device veth0_macvtap entered promiscuous mode [ 127.464343][ T4725] device veth1_macvtap entered promiscuous mode [ 127.516128][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.538233][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.567997][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.599256][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.624302][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.649447][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.671732][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.684974][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.706692][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.720973][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.734794][ T4307] attempt to access beyond end of device [ 127.734794][ T4307] loop2: rw=2049, want=45104, limit=40427 [ 127.736027][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.778094][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.789770][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.806041][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.821756][ T4868] loop3: detected capacity change from 0 to 32768 [ 127.839927][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.854297][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.868733][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.886490][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.899338][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.920181][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.951353][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.968707][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.990979][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.001318][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.016759][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.029099][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.121490][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.153405][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.183267][ T4725] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.192086][ T4725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.256138][ T4725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.310984][ T4725] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.331558][ T4881] loop1: detected capacity change from 0 to 256 [ 128.525396][ T4881] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x409ea064, utbl_chksum : 0x7319d30d) [ 128.555425][ T4881] exFAT-fs (loop1): failed to load alloc-bitmap [ 128.587726][ T4881] exFAT-fs (loop1): failed to recognize exfat type [ 128.669215][ T4889] loop2: detected capacity change from 0 to 1024 [ 128.735571][ T4889] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 128.777160][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.802617][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.860726][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.954392][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.972981][ T4889] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 129.001942][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.080372][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.163936][ T4891] device wg2 left promiscuous mode [ 129.255174][ T3705] device hsr_slave_0 left promiscuous mode [ 129.270756][ T3705] device hsr_slave_1 left promiscuous mode [ 129.294417][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.311075][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.373225][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.411376][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.514751][ T3705] device bridge_slave_1 left promiscuous mode [ 129.547137][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.584246][ T3705] device bridge_slave_0 left promiscuous mode [ 129.612499][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.679189][ T3705] device veth1_macvtap left promiscuous mode [ 129.686621][ T3705] device veth0_macvtap left promiscuous mode [ 129.700507][ T3705] device veth1_vlan left promiscuous mode [ 129.720576][ T3705] device veth0_vlan left promiscuous mode [ 130.215481][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 130.240610][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 130.269583][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.300666][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.485743][ T4920] loop0: detected capacity change from 0 to 65536 [ 130.498898][ T3705] bond0 (unregistering): Released all slaves [ 130.670214][ T4932] syz.2.324 (4932): attempted to duplicate a private mapping with mremap. This is not supported. [ 130.687224][ T4920] XFS (loop0): Mounting V5 Filesystem [ 130.700416][ T4933] loop4: detected capacity change from 0 to 1024 [ 130.909396][ T4920] XFS (loop0): Ending clean mount [ 130.930517][ T4920] XFS (loop0): Quotacheck needed: Please wait. [ 130.953143][ T4947] loop3: detected capacity change from 0 to 1024 [ 131.023538][ T4947] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 131.090398][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 131.106300][ T4933] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 131.301776][ T4933] loop4: detected capacity change from 0 to 1024 [ 131.312603][ T4920] XFS (loop0): Quotacheck: Done. [ 132.456008][ T4960] loop1: detected capacity change from 0 to 256 [ 132.574216][ T471] hfsplus: b-tree write err: -5, ino 4 [ 132.596697][ T26] audit: type=1800 audit(1719276471.868:16): pid=4959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="file1" dev="loop0" ino=44 res=0 errno=0 [ 132.777003][ T4960] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x409ea064, utbl_chksum : 0x7319d30d) [ 132.794558][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800947][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.838129][ T4960] exFAT-fs (loop1): failed to load alloc-bitmap [ 132.873787][ T4970] loop2: detected capacity change from 0 to 64 [ 132.975889][ T4960] exFAT-fs (loop1): failed to recognize exfat type [ 132.987450][ T3508] XFS (loop0): Unmounting Filesystem [ 134.029717][ T4995] loop2: detected capacity change from 0 to 256 [ 134.215704][ T4995] FAT-fs (loop2): Unrecognized mount option "nontmtail=0" or missing value [ 134.307869][ T4999] loop4: detected capacity change from 0 to 2048 [ 134.517277][ T26] audit: type=1804 audit(1719276473.788:17): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.348" name="/root/syzkaller.yaSqjP/31/memory.events" dev="sda1" ino=1991 res=1 errno=0 [ 134.548363][ T4999] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.682885][ T26] audit: type=1800 audit(1719276473.788:18): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.348" name="memory.events" dev="sda1" ino=1991 res=0 errno=0 [ 134.857175][ T4988] loop3: detected capacity change from 0 to 40427 [ 134.973180][ T4988] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 134.983362][ T4988] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.090163][ T4988] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.298133][ T4988] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.315512][ T4988] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.674757][ T5041] loop0: detected capacity change from 0 to 256 [ 135.785959][ T5041] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x409ea064, utbl_chksum : 0x7319d30d) [ 135.908018][ T5041] exFAT-fs (loop0): failed to load alloc-bitmap [ 135.928212][ T5041] exFAT-fs (loop0): failed to recognize exfat type [ 136.006039][ T5030] loop1: detected capacity change from 0 to 32768 [ 136.240662][ T5030] XFS (loop1): Mounting V5 Filesystem [ 136.400263][ T5030] XFS (loop1): Torn write (CRC failure) detected at log block 0xc0. Truncating head block from 0x100. [ 136.470677][ T5030] XFS (loop1): failed to locate log tail [ 136.490445][ T5030] XFS (loop1): log mount/recovery failed: error -74 [ 136.599641][ T5030] XFS (loop1): log mount failed [ 137.072824][ T5052] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.277372][ T5040] loop2: detected capacity change from 0 to 40427 [ 137.372528][ T5040] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 137.380659][ T5040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 137.464143][ T5040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.598429][ T5040] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 137.632316][ T5040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.755952][ T26] audit: type=1804 audit(1719276477.028:19): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.357" name="/root/syzkaller.yaSqjP/35/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 137.898397][ T26] audit: type=1804 audit(1719276477.058:20): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.357" name="/root/syzkaller.yaSqjP/35/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 138.041963][ T26] audit: type=1804 audit(1719276477.208:21): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.357" name="/root/syzkaller.yaSqjP/35/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 138.086637][ T5093] blk_update_request: I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 138.106410][ T5093] gfs2: error 10 reading superblock [ 138.247475][ T4307] attempt to access beyond end of device [ 138.247475][ T4307] loop2: rw=2049, want=45104, limit=40427 [ 138.864823][ T5121] loop4: detected capacity change from 0 to 64 [ 139.691663][ T5151] loop1: detected capacity change from 0 to 1024 [ 139.849843][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 140.004994][ T5151] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 140.149133][ T5151] loop1: detected capacity change from 0 to 1024 [ 140.167509][ T5111] loop0: detected capacity change from 0 to 32768 [ 140.408606][ T5111] XFS (loop0): Mounting V5 Filesystem [ 141.238253][ T5111] XFS (loop0): Starting recovery (logdev: internal) [ 141.322165][ T5111] XFS (loop0): Ending recovery (logdev: internal) [ 141.343245][ T9] hfsplus: b-tree write err: -5, ino 4 [ 141.366956][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 141.468928][ T5177] loop1: detected capacity change from 0 to 512 [ 141.550338][ T5180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.557741][ T3508] XFS (loop0): Unmounting Filesystem [ 141.719585][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 141.736113][ T5177] ext4 filesystem being mounted at /root/syzkaller.vorNr8/93/file0 supports timestamps until 2038 (0x7fffffff) [ 141.813754][ T5138] loop2: detected capacity change from 0 to 32768 [ 141.933318][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 141.963124][ T5138] XFS (loop2): Mounting V5 Filesystem [ 142.124167][ T5138] XFS (loop2): Torn write (CRC failure) detected at log block 0xc0. Truncating head block from 0x100. [ 142.148542][ T5138] XFS (loop2): failed to locate log tail [ 142.154567][ T5138] XFS (loop2): log mount/recovery failed: error -74 [ 142.196384][ T5138] XFS (loop2): log mount failed [ 142.255354][ T5215] loop0: detected capacity change from 0 to 2048 [ 142.340956][ T5215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.626395][ T5224] loop3: detected capacity change from 0 to 64 [ 142.835065][ T5230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.020231][ T5240] loop1: detected capacity change from 0 to 512 [ 143.107926][ T5245] loop2: detected capacity change from 0 to 512 [ 143.122394][ T5242] kvm: emulating exchange as write [ 143.136121][ T5240] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,norecovery,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 143.180994][ T5240] ext4 filesystem being mounted at /root/syzkaller.vorNr8/95/file0 supports timestamps until 2038 (0x7fffffff) [ 143.209855][ T5245] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.425: casefold flag without casefold feature [ 143.229536][ T5245] EXT4-fs error (device loop2): __ext4_iget:4861: inode #12: block 2: comm syz.2.425: invalid block [ 143.254518][ T5245] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.425: error while reading EA inode 12 err=-117 [ 143.393376][ T5245] EXT4-fs (loop2): 1 orphan inode deleted [ 143.418833][ T5245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.439476][ T5255] loop3: detected capacity change from 0 to 2048 [ 143.546958][ T5255] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.551066][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 143.600585][ T5264] loop2: detected capacity change from 0 to 64 [ 143.640274][ T5255] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.664375][ T5255] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 143.682946][ T5255] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.682946][ T5255] [ 143.723613][ T5255] EXT4-fs (loop3): Total free blocks count 0 [ 143.729655][ T5255] EXT4-fs (loop3): Free/Dirty block details [ 143.736785][ T5255] EXT4-fs (loop3): free_blocks=2415919104 [ 143.743781][ T5255] EXT4-fs (loop3): dirty_blocks=16 [ 143.779668][ T5255] EXT4-fs (loop3): Block reservation details [ 143.787737][ T5268] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 143.791150][ T5255] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 143.805299][ T5268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.826687][ T5265] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 143.852840][ T5265] EXT4-fs (loop3): This should not happen!! Data will be lost [ 143.852840][ T5265] [ 144.152413][ T3598] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.227018][ T5276] loop2: detected capacity change from 0 to 2048 [ 144.248676][ T5282] loop3: detected capacity change from 0 to 2048 [ 144.369498][ T5276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.391275][ T5287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.435172][ T3598] usb 2-1: Using ep0 maxpacket: 32 [ 144.530902][ T26] audit: type=1800 audit(1719276483.798:22): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 144.592557][ T3598] usb 2-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=cb.35 [ 144.611448][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.620009][ T3504] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 144.620172][ T5282] trusted_key: encrypted_key: insufficient parameters specified [ 144.629969][ T3504] CPU: 0 PID: 3504 Comm: kworker/u5:1 Not tainted 5.15.161-syzkaller #0 [ 144.630035][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.656109][ T3504] Workqueue: hci1 hci_rx_work [ 144.660999][ T3504] Call Trace: [ 144.664295][ T3504] [ 144.667216][ T3504] dump_stack_lvl+0x1e3/0x2d0 [ 144.671897][ T3504] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 144.677523][ T3504] ? panic+0x860/0x860 [ 144.681589][ T3504] ? sysfs_create_dir_ns+0x282/0x390 [ 144.686874][ T3504] sysfs_create_dir_ns+0x2c6/0x390 [ 144.691983][ T3504] ? sysfs_warn_dup+0xa0/0xa0 [ 144.696653][ T3504] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.701849][ T3504] kobject_add_internal+0x6e0/0xe00 [ 144.707046][ T3504] kobject_add+0x14e/0x210 [ 144.711457][ T3504] ? device_add+0x3c2/0xfd0 [ 144.715962][ T3504] ? kobject_init+0x1d0/0x1d0 [ 144.720733][ T3504] ? __raw_spin_lock_init+0x41/0x100 [ 144.726122][ T3504] ? get_device_parent+0x128/0x400 [ 144.731295][ T3504] device_add+0x476/0xfd0 [ 144.735645][ T3504] hci_conn_add_sysfs+0xe4/0x1f0 [ 144.740601][ T3504] le_conn_complete_evt+0xc15/0x1500 [ 144.745901][ T3504] ? cs_le_create_conn+0x5f0/0x5f0 [ 144.751029][ T3504] hci_le_meta_evt+0xd70/0x3df0 [ 144.755919][ T3504] ? __mutex_lock_common+0x444/0x25a0 [ 144.761309][ T3504] ? hci_remote_host_features_evt+0x280/0x280 [ 144.767378][ T3504] ? __mutex_unlock_slowpath+0x218/0x750 [ 144.773009][ T3504] ? hci_event_packet+0x3b4/0x1550 [ 144.778208][ T3504] ? mutex_unlock+0x10/0x10 [ 144.782810][ T3504] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 144.789099][ T3504] ? print_irqtrace_events+0x210/0x210 [ 144.794573][ T3504] hci_event_packet+0xc41/0x1550 [ 144.799522][ T3504] ? rcu_lock_release+0x20/0x20 [ 144.804378][ T3504] ? hci_send_to_monitor+0x99/0x4d0 [ 144.809571][ T3504] hci_rx_work+0x232/0x990 [ 144.813989][ T3504] process_one_work+0x8a1/0x10c0 [ 144.818965][ T3504] ? worker_detach_from_pool+0x260/0x260 [ 144.824629][ T3504] ? _raw_spin_lock_irqsave+0x120/0x120 [ 144.830261][ T3504] ? kthread_data+0x4e/0xc0 [ 144.834766][ T3504] ? wq_worker_running+0x97/0x170 [ 144.839787][ T3504] worker_thread+0xaca/0x1280 [ 144.844475][ T3504] kthread+0x3f6/0x4f0 [ 144.848537][ T3504] ? rcu_lock_release+0x20/0x20 [ 144.853470][ T3504] ? kthread_blkcg+0xd0/0xd0 [ 144.858063][ T3504] ret_from_fork+0x1f/0x30 [ 144.862483][ T3504] [ 144.866241][ T3504] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 144.879656][ T3504] Bluetooth: hci1: failed to register connection device [ 144.901307][ T3598] usb 2-1: config 0 descriptor?? [ 144.908693][ T26] audit: type=1800 audit(1719276483.838:23): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.440" name="file1" dev="sda1" ino=1992 res=0 errno=0 [ 144.932721][ T26] audit: type=1800 audit(1719276483.858:24): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 144.954372][ T3598] smsc95xx v2.0.0 [ 144.958010][ T3598] smsc95xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 145.000186][ T3598] smsc95xx: probe of 2-1:0.0 failed with error -22 [ 145.155830][ T3598] usb 2-1: USB disconnect, device number 5 [ 145.452735][ T5310] loop0: detected capacity change from 0 to 16 [ 145.481851][ T5314] loop4: detected capacity change from 0 to 512 [ 145.546882][ T5314] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.575294][ T5314] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.445: casefold flag without casefold feature [ 145.589092][ T5314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.445: missing EA_INODE flag [ 145.626213][ T5310] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 145.649836][ T5314] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.445: error while reading EA inode 12 err=-117 [ 145.668117][ T5314] EXT4-fs (loop4): 1 orphan inode deleted [ 145.684729][ T5314] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 145.688533][ T5320] capability: warning: `syz.3.449' uses deprecated v2 capabilities in a way that may be insecure [ 145.893087][ T5329] loop2: detected capacity change from 0 to 256 [ 145.974889][ T26] audit: type=1800 audit(1719276485.248:25): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.453" name="file1" dev="sda1" ino=1979 res=0 errno=0 [ 146.079100][ T5336] overlayfs: failed to resolve '/PureAcks TCPHPAcks TCPRenoRecovery TCPSackRecovery TCPSACKReneging TCPSACKReorder TCPRenoReorder TCPTSReorder TCPFullUndo TCPPartialUndo TCPDSACKUndo TCPLossUndo TCPLostRetransmit TCPRenoFailures TCPSackFailures TCPLossFailures TCPFastRetrans TCPSlowStartRetrans TCPTimeouts TCPLossProbes TCPLossProbeRecovery TCPRenoRecoveryFail TCPSackRecoveryFail TCPRcvCollapsed TCPBacklogCoalesce TCPDSACKOldSent TCPDSACKOfoSent TCPDSACKRecv TCPDSACKOfoRecv TCPAbortOnData TCPAbortOnClose TCPAbortOnMemory TCPAbortOnTimeout TCPAbortOnLinger TCPAbortFailed TCPMemoryPressures TCPMemoryPressuresChrono TCPSACKDiscard TCPDSACKIgnoredOld TCPDSACKIgnoredNoUndo TCPSpuriousRTOs TCPMD5NotFound TCPMD5Unexpected TCPMD5Failure TCPSackShifted TCPSackMerged TCPSackShiftFallback TCPBacklogDrop PFMemallocDrop TCPMinTTLDrop TCPDeferAcceptDrop IPReversePathFilter TCPTimeWaitOverflow TCPReqQFullDoCookies TCPReqQFullDrop TCPRetransFail TCPRcvCoalesce TCPOFOQueue TCPO [ 146.849925][ T5344] loop1: detected capacity change from 0 to 512 [ 147.104656][ T5344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.167053][ T5344] ext4 filesystem being mounted at /root/syzkaller.vorNr8/98/file0 supports timestamps until 2038 (0x7fffffff) [ 147.264424][ T5344] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.455: bg 0: block 18: invalid block bitmap [ 147.310347][ T5361] loop0: detected capacity change from 0 to 22 [ 147.337422][ T5344] Quota error (device loop1): write_blk: dquota write failed [ 147.364892][ T5344] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 147.381110][ T5344] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.455: Failed to acquire dquot type 1 [ 147.393732][ T5361] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 147.455446][ T5361] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 147.649714][ T5367] loop2: detected capacity change from 0 to 2048 [ 147.806572][ T5367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.844450][ T5367] ext4 filesystem being mounted at /root/syzkaller.yaSqjP/47/file0 supports timestamps until 2038 (0x7fffffff) [ 147.982550][ T3550] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.021531][ T5385] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 148.042143][ T5385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.061421][ T5387] loop1: detected capacity change from 0 to 512 [ 148.127404][ T5387] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.186043][ T5387] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.467: casefold flag without casefold feature [ 148.233026][ T5387] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.467: missing EA_INODE flag [ 148.251853][ T5387] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.467: error while reading EA inode 12 err=-117 [ 148.276523][ T5387] EXT4-fs (loop1): 1 orphan inode deleted [ 148.292914][ T5387] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 148.309280][ T5392] loop4: detected capacity change from 0 to 512 [ 148.363784][ T3550] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 148.392519][ T3550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.413782][ T3550] usb 4-1: config 0 descriptor?? [ 148.460129][ T3550] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 148.499919][ T5392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.510436][ T5401] loop2: detected capacity change from 0 to 128 [ 148.522907][ T5402] loop0: detected capacity change from 0 to 256 [ 148.530543][ T5392] ext4 filesystem being mounted at /root/syzkaller.dVAyJA/41/file0 supports timestamps until 2038 (0x7fffffff) [ 148.589148][ T5392] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.472: bg 0: block 18: invalid block bitmap [ 148.612880][ T5392] Quota error (device loop4): write_blk: dquota write failed [ 148.647220][ T5392] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.681609][ T5392] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.472: Failed to acquire dquot type 1 [ 148.956079][ T5410] loop2: detected capacity change from 0 to 512 [ 149.080987][ T5416] loop1: detected capacity change from 0 to 2048 [ 149.100230][ T5410] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.475: inline data xattr refers to an external xattr inode [ 149.167058][ T5419] loop4: detected capacity change from 0 to 64 [ 149.190865][ T5410] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.475: couldn't read orphan inode 12 (err -117) [ 149.209181][ T5421] loop0: detected capacity change from 0 to 64 [ 149.297816][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,usrjquota=,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,grpjquota=,,errors=continue. Quota mode: writeback. [ 149.331147][ T5416] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.469272][ T5425] loop4: detected capacity change from 0 to 512 [ 149.522398][ T3550] gspca_cpia1: usb_control_msg 05, error -110 [ 149.563798][ T5416] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 149.614654][ T5425] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.480: casefold flag without casefold feature [ 149.627371][ T3550] gspca_cpia1: usb_control_msg 01, error -32 [ 149.659939][ T5430] loop0: detected capacity change from 0 to 256 [ 149.675970][ T5425] EXT4-fs error (device loop4): __ext4_iget:4861: inode #12: block 2: comm syz.4.480: invalid block [ 149.700573][ T3550] gspca_cpia1: usb_control_msg 01, error -71 [ 149.731972][ T3550] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 149.748686][ T5425] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.480: error while reading EA inode 12 err=-117 [ 149.798330][ T3550] usb 4-1: USB disconnect, device number 2 [ 149.848462][ T5436] capability: warning: `syz.1.483' uses 32-bit capabilities (legacy support in use) [ 149.855963][ T5425] EXT4-fs (loop4): 1 orphan inode deleted [ 149.876703][ T5435] loop2: detected capacity change from 0 to 512 [ 149.877077][ T5425] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.969913][ T5435] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.983527][ T5438] loop1: detected capacity change from 0 to 512 [ 150.043532][ T5435] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.485: casefold flag without casefold feature [ 150.053537][ T5440] loop0: detected capacity change from 0 to 2048 [ 150.060642][ T5435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.485: missing EA_INODE flag [ 150.079783][ T5435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.485: error while reading EA inode 12 err=-117 [ 150.096254][ T5435] EXT4-fs (loop2): 1 orphan inode deleted [ 150.102031][ T5435] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 150.210849][ T5447] loop4: detected capacity change from 0 to 256 [ 150.236797][ T5438] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.257180][ T5440] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.282912][ T5438] ext4 filesystem being mounted at /root/syzkaller.vorNr8/104/file0 supports timestamps until 2038 (0x7fffffff) [ 150.377150][ T5452] loop3: detected capacity change from 0 to 128 [ 150.397174][ T5438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.487: bg 0: block 18: invalid block bitmap [ 150.424512][ T5438] Quota error (device loop1): write_blk: dquota write failed [ 150.444455][ T5438] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 150.476478][ T5438] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.487: Failed to acquire dquot type 1 [ 150.815468][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 150.948026][ T5467] loop2: detected capacity change from 0 to 4096 [ 151.068268][ T5467] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 151.111391][ T5477] loop3: detected capacity change from 0 to 16 [ 151.120695][ T5467] ntfs3: loop2: Failed to load $MFT. [ 151.196313][ T5477] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 151.580763][ T26] audit: type=1800 audit(1719276490.848:26): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.502" name="file1" dev="sda1" ino=1991 res=0 errno=0 [ 151.771187][ T5490] loop1: detected capacity change from 0 to 512 [ 151.781120][ T5487] loop4: detected capacity change from 0 to 512 [ 151.962065][ T5487] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.990635][ T5490] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.506: dx entry: limit 0 != root limit 124 [ 152.018430][ T5487] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.504: casefold flag without casefold feature [ 152.066222][ T5490] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.506: Corrupt directory, running e2fsck is recommended [ 152.072080][ T5487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.504: missing EA_INODE flag [ 152.086045][ T5490] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 152.099939][ T5490] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.506: corrupted in-inode xattr [ 152.116081][ T5490] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.506: couldn't read orphan inode 15 (err -117) [ 152.170976][ T5487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.504: error while reading EA inode 12 err=-117 [ 152.195135][ T5490] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.quota,grpquota,jqfmt=vfsv1,journal_dev=0x00000000000008d9,,,errors=continue. Quota mode: writeback. [ 152.205655][ T5499] loop2: detected capacity change from 0 to 2048 [ 152.250253][ T5487] EXT4-fs (loop4): 1 orphan inode deleted [ 152.269320][ T5487] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 152.435487][ T5499] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.471021][ T5505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.510'. [ 152.582171][ T26] audit: type=1800 audit(1719276491.848:27): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 152.709765][ T26] audit: type=1800 audit(1719276491.908:28): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 152.752494][ T5511] loop1: detected capacity change from 0 to 4096 [ 152.822341][ T5511] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 152.869991][ T5511] ntfs3: loop1: Failed to load $MFT. [ 152.932317][ T3247] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.952346][ T3247] usb 4-1: Using ep0 maxpacket: 32 [ 154.007591][ T26] audit: type=1800 audit(1719276493.278:29): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.516" name="file1" dev="sda1" ino=1991 res=0 errno=0 [ 154.092517][ T3247] usb 4-1: New USB device found, idVendor=0424, idProduct=9530, bcdDevice=cb.35 [ 154.102013][ T3247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.150250][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.178200][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 154.190490][ T3247] usb 4-1: config 0 descriptor?? [ 154.196745][ T5528] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.205964][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.245635][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.263534][ T3247] smsc95xx v2.0.0 [ 154.267237][ T3247] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 154.277372][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.316685][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.326112][ T3247] smsc95xx: probe of 4-1:0.0 failed with error -22 [ 154.361179][ T5535] loop1: detected capacity change from 0 to 512 [ 154.362495][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.385053][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.400436][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.418225][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.430711][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.471702][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.486543][ T5535] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.521: dx entry: limit 0 != root limit 124 [ 154.513154][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.513198][ T5535] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.521: Corrupt directory, running e2fsck is recommended [ 154.527721][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.547450][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.558943][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.573722][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.582319][ T3247] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.595460][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.605107][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.617538][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.636462][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.636670][ T5535] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 154.645275][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.664487][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.675096][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.687729][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.698759][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.710427][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.720448][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.734974][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.752070][ T5535] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.521: corrupted in-inode xattr [ 154.767294][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.780613][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.796594][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.809953][ T5535] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.521: couldn't read orphan inode 15 (err -117) [ 154.826271][ T4042] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.860024][ T4042] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 154.863383][ T5535] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.quota,grpquota,jqfmt=vfsv1,journal_dev=0x00000000000008d9,,,errors=continue. Quota mode: writeback. [ 154.917006][ T23] usb 4-1: USB disconnect, device number 3 [ 154.946851][ T5546] loop4: detected capacity change from 0 to 512 [ 155.013148][ T3247] usb 3-1: config 0 has no interfaces? [ 155.018709][ T3247] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 155.031127][ T5546] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.057339][ T5546] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 155.081264][ T5546] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 155.095041][ T5546] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.524: Failed to acquire dquot type 0 [ 155.109275][ T3247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.132540][ T5546] EXT4-fs (loop4): 1 truncate cleaned up [ 155.156124][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.239928][ T3247] usb 3-1: config 0 descriptor?? [ 155.294216][ T3247] usb 3-1: can't set config #0, error -71 [ 155.355924][ T3247] usb 3-1: USB disconnect, device number 4 [ 155.471717][ T5559] loop1: detected capacity change from 0 to 4096 [ 155.496584][ T5560] Process accounting resumed [ 155.527749][ T5559] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 155.615606][ T5559] ntfs3: loop1: Failed to load $MFT. [ 155.772291][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.845230][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 155.924731][ T5580] loop1: detected capacity change from 0 to 1024 [ 155.950050][ T26] audit: type=1800 audit(1719276495.218:30): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.536" name="/" dev="fuse" ino=1 res=0 errno=0 [ 155.982236][ T5580] hfsplus: xattr searching failed [ 156.052478][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 156.114504][ T5580] hfsplus: xattr searching failed [ 156.124009][ T5580] hfsplus: xattr searching failed [ 156.143291][ T5583] loop2: detected capacity change from 0 to 512 [ 156.172670][ T13] usb 1-1: config 0 has no interfaces? [ 156.183904][ T5585] hfsplus: xattr searching failed [ 156.317830][ T5583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.352587][ T5583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.372639][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.381823][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.403639][ T13] usb 1-1: Product: syz [ 156.407822][ T13] usb 1-1: Manufacturer: syz [ 156.421635][ T13] usb 1-1: SerialNumber: syz [ 156.459167][ T13] usb 1-1: config 0 descriptor?? [ 156.481154][ T1233] hfsplus: b-tree write err: -5, ino 4 [ 156.513831][ T5583] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.535: bad orphan inode 16 [ 156.565535][ T5583] ext4_test_bit(bit=15, block=4) = 0 [ 156.618911][ T5583] EXT4-fs (loop2): 1 orphan inode deleted [ 156.629462][ T5583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.709368][ T5589] loop1: detected capacity change from 0 to 512 [ 156.857036][ T5589] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.866594][ T3598] usb 1-1: USB disconnect, device number 3 [ 156.887829][ T5589] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 156.897471][ T5589] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 156.908335][ T5589] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.539: Failed to acquire dquot type 0 [ 156.928820][ T5589] EXT4-fs (loop1): 1 truncate cleaned up [ 156.960683][ T5589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.396575][ T5599] loop3: detected capacity change from 0 to 2048 [ 157.491373][ T5598] loop4: detected capacity change from 0 to 8192 [ 157.620252][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.777583][ T5610] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.812603][ T26] audit: type=1800 audit(1719276497.088:31): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.542" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 157.853481][ T26] audit: type=1800 audit(1719276497.128:32): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.542" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 157.862562][ T5612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 158.092980][ T5612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 158.267132][ T5615] loop0: detected capacity change from 0 to 4096 [ 158.410709][ T5615] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 158.516098][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.530354][ T5615] ntfs3: loop0: Failed to load $UpCase. [ 158.555784][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 158.582371][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.595850][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.637173][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.664608][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.711195][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.750707][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.812960][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.875010][ T5629] sctp: [Deprecated]: syz.4.550 (pid 5629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.875010][ T5629] Use struct sctp_sack_info instead [ 158.912370][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 158.972449][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.060287][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.069999][ T5629] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 159.102447][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.115388][ T5629] PKCS7: Only support pkcs7_signedData type [ 159.131760][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.145027][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.172609][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.184774][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.194878][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.203241][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.212620][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.227207][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.240984][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.258406][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.270388][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.312629][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.356070][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.375439][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.387748][ T5646] loop2: detected capacity change from 0 to 512 [ 159.405185][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.429004][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.438188][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.450241][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.459692][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.478748][ T3550] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 159.504353][ T3550] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 159.519717][ T5646] EXT4-fs (loop2): orphan cleanup on readonly fs [ 159.590636][ T5646] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 159.606841][ T5636] netlink: 'syz.1.553': attribute type 13 has an invalid length. [ 159.620057][ T5646] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 159.634218][ T5636] device veth0_macvtap left promiscuous mode [ 159.650682][ T5646] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.555: Failed to acquire dquot type 0 [ 159.736670][ T5636] macvtap0: refused to change device tx_queue_len [ 159.769445][ T5646] EXT4-fs (loop2): 1 truncate cleaned up [ 159.792694][ T3550] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.818250][ T5646] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.019430][ T3504] Bluetooth: Wrong link type (-71) [ 160.252653][ T3550] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 160.260312][ T3550] usb 4-1: can't read configurations, error -71 [ 160.268565][ T5674] loop2: detected capacity change from 0 to 1024 [ 160.422386][ T3552] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.589474][ T5688] kvm: pic: non byte read [ 160.596533][ T3705] hfsplus: b-tree write err: -5, ino 4 [ 160.648338][ T5693] netem: incorrect ge model size [ 160.673543][ T5693] netem: change failed [ 160.682369][ T5691] loop3: detected capacity change from 0 to 512 [ 160.795463][ T5691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.913943][ T5703] loop4: detected capacity change from 0 to 1024 [ 160.972715][ T3552] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 161.014695][ T5691] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.563: bad orphan inode 16 [ 161.035737][ T5691] ext4_test_bit(bit=15, block=4) = 0 [ 161.041199][ T5691] EXT4-fs (loop3): 1 orphan inode deleted [ 161.044147][ T5703] hfsplus: bad catalog entry type [ 161.051222][ T3552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.060513][ T5691] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.088561][ T3579] hfsplus: b-tree write err: -5, ino 4 [ 161.144995][ T3552] usb 2-1: Product: syz [ 161.169011][ T3552] usb 2-1: Manufacturer: syz [ 161.197013][ T3552] usb 2-1: SerialNumber: syz [ 161.218362][ T5708] loop2: detected capacity change from 0 to 512 [ 161.243845][ T3552] usb 2-1: config 0 descriptor?? [ 161.306982][ T5708] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.321210][ T5708] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 161.331281][ T5708] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 161.342577][ T5708] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.571: Failed to acquire dquot type 0 [ 161.406090][ T5708] EXT4-fs (loop2): 1 truncate cleaned up [ 161.436063][ T5708] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.523403][ T3552] usb-storage 2-1:0.0: USB Mass Storage device detected [ 161.541514][ T5718] syz.0.575 sent an empty control message without MSG_MORE. [ 161.641714][ T3552] usb 2-1: USB disconnect, device number 6 [ 161.745511][ T5725] loop0: detected capacity change from 0 to 512 [ 161.904326][ T5729] netem: incorrect ge model size [ 161.937094][ T5729] netem: change failed [ 162.009231][ T5725] virtio-fs: tag <(null)> not found [ 162.120798][ T5734] loop4: detected capacity change from 0 to 1024 [ 162.267227][ T5740] Process accounting resumed [ 162.286060][ T5734] hfsplus: bad catalog entry type [ 162.338568][ T3705] hfsplus: b-tree write err: -5, ino 4 [ 163.525511][ T5749] loop1: detected capacity change from 0 to 8192 [ 163.594921][ T5757] loop0: detected capacity change from 0 to 1024 [ 163.684520][ T5757] hfsplus: xattr searching failed [ 163.720908][ T5762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.748554][ T5757] hfsplus: xattr searching failed [ 163.806794][ T5757] hfsplus: xattr searching failed [ 163.946227][ T5765] hfsplus: xattr searching failed [ 164.170641][ T1233] hfsplus: b-tree write err: -5, ino 4 [ 164.340379][ T5769] program syz.4.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.635844][ T5781] loop0: detected capacity change from 0 to 1024 [ 164.825804][ T5781] hfsplus: bad catalog entry type [ 164.948972][ T3579] hfsplus: b-tree write err: -5, ino 4 [ 165.196460][ T5760] loop2: detected capacity change from 0 to 32768 [ 165.309069][ T5794] loop3: detected capacity change from 0 to 4096 [ 165.362694][ T5760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.593 (5760) [ 165.398469][ T5794] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 165.413584][ T5815] loop4: detected capacity change from 0 to 64 [ 165.435198][ T5760] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 165.479432][ T5760] BTRFS info (device loop2): turning off barriers [ 165.517773][ T5760] BTRFS info (device loop2): force clearing of disk cache [ 165.556449][ T5760] BTRFS info (device loop2): doing ref verification [ 165.577953][ T5794] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 165.603489][ T5760] BTRFS info (device loop2): using free space tree [ 165.610062][ T5760] BTRFS info (device loop2): has skinny extents [ 165.696502][ T1233] ntfs3: loop3: ino=1b, Internal error [ 165.714774][ T1233] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 165.753649][ T5816] loop0: detected capacity change from 0 to 8192 [ 165.806006][ T5831] loop1: detected capacity change from 0 to 2048 [ 165.898076][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.961454][ T5831] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.972715][ T5831] ext4 filesystem being mounted at /root/syzkaller.vorNr8/128/file0 supports timestamps until 2038 (0x7fffffff) [ 166.099171][ T5760] BTRFS info (device loop2): enabling ssd optimizations [ 166.163923][ T5861] loop3: detected capacity change from 0 to 512 [ 166.178102][ T5760] BTRFS info (device loop2): clearing free space tree [ 166.259448][ T5760] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.270147][ T5760] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.355758][ T4725] Trying to free block not in datazone [ 166.458466][ T5760] BTRFS info (device loop2): creating free space tree [ 166.474280][ T5865] loop1: detected capacity change from 0 to 1024 [ 166.491614][ T5760] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.549488][ T5861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.593746][ T5760] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.651495][ T5865] hfsplus: bad catalog entry type [ 166.673850][ T5760] BTRFS info (device loop2): checking UUID tree [ 166.715169][ T5760] BTRFS warning (device loop2): failed to start uuid_rescan task [ 166.751847][ T5861] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.611: bad orphan inode 16 [ 166.779674][ T5760] BTRFS warning (device loop2): failed to check the UUID tree: -4 [ 166.838548][ T3705] hfsplus: b-tree write err: -5, ino 4 [ 166.882112][ T5861] ext4_test_bit(bit=15, block=4) = 0 [ 166.907240][ T5861] EXT4-fs (loop3): 1 orphan inode deleted [ 166.922378][ T5861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.026761][ T5873] loop0: detected capacity change from 0 to 8192 [ 167.201815][ T5760] BTRFS error (device loop2): open_ctree failed [ 167.204193][ T5873] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 167.252638][ T5873] REISERFS (device loop0): using ordered data mode [ 167.259734][ T5873] reiserfs: using flush barriers [ 167.272306][ T5873] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.279925][ T5875] program syz.4.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.289443][ T5873] REISERFS (device loop0): checking transaction log (loop0) [ 167.316740][ T5873] REISERFS (device loop0): Using r5 hash to sort names [ 167.323921][ T5873] REISERFS (device loop0): using 3.5.x disk format [ 167.339488][ T5873] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 167.365970][ T5885] binder: BINDER_SET_CONTEXT_MGR already set [ 167.421091][ T5885] binder: 5884:5885 ioctl 4018620d 20000040 returned -16 [ 167.998821][ T5899] loop4: detected capacity change from 0 to 256 [ 168.450709][ T5903] loop0: detected capacity change from 0 to 4096 [ 168.549123][ T5903] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 168.750993][ T5903] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.840622][ T3705] ntfs3: loop0: ino=1b, Internal error [ 168.858341][ T3705] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 170.692318][ T5941] loop2: detected capacity change from 0 to 4096 [ 170.782051][ T5941] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 170.892390][ T3550] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.022139][ T5941] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 171.118529][ T3607] ntfs3: loop2: ino=1b, Internal error [ 171.124252][ T3607] ntfs3: loop2: ntfs3_write_inode r=1b failed, -22. [ 171.325331][ T5951] loop2: detected capacity change from 0 to 4096 [ 171.408064][ T5951] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 171.438084][ T5951] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 171.442598][ T3550] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 171.479982][ T3550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.519047][ T5951] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 171.522361][ T3550] usb 4-1: Product: syz [ 171.558046][ T3550] usb 4-1: Manufacturer: syz [ 171.575945][ T3550] usb 4-1: SerialNumber: syz [ 171.592649][ T5951] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 171.599551][ T3550] usb 4-1: config 0 descriptor?? [ 171.620812][ T5959] loop4: detected capacity change from 0 to 4096 [ 171.631538][ T5951] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 171.672339][ T5951] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 171.711152][ T5959] NILFS (loop4): invalid segment: Checksum error in segment payload [ 171.732590][ T5959] NILFS (loop4): trying rollback from an earlier position [ 171.736843][ T5951] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 171.746549][ T5961] loop1: detected capacity change from 0 to 8192 [ 171.772531][ T5951] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 171.776829][ T5959] NILFS (loop4): recovery complete [ 171.800793][ T5951] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 171.809377][ T5951] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 171.830403][ T5962] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.878261][ T5951] ntfs: volume version 3.1. [ 171.893923][ T3550] usb-storage 4-1:0.0: USB Mass Storage device detected [ 171.910385][ T5964] loop0: detected capacity change from 0 to 2048 [ 171.941408][ T5967] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.963076][ T2962] loop0: p1 p2 p3 [ 171.963924][ T2962] loop0: p1 size 458752 extends beyond EOD, truncated [ 171.973999][ T2962] loop0: p2 start 4294902784 is beyond EOD, truncated [ 171.986228][ T2962] loop0: p3 start 4278191616 is beyond EOD, truncated [ 171.996067][ T3550] usb 4-1: USB disconnect, device number 6 [ 172.072738][ T5964] loop0: p1 p2 p3 [ 172.076679][ T5964] loop0: p1 size 458752 extends beyond EOD, truncated [ 172.103682][ T5964] loop0: p2 start 4294902784 is beyond EOD, truncated [ 172.110630][ T5964] loop0: p3 start 4278191616 is beyond EOD, truncated [ 172.482422][ T5971] loop2: detected capacity change from 0 to 4096 [ 172.551204][ T5971] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 172.563073][ T5974] loop4: detected capacity change from 0 to 4096 [ 172.575702][ T4209] udevd[4209]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.606453][ T5971] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 172.619207][ T5971] ntfs3: loop2: Failed to load $MFT. [ 172.640703][ T5974] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 172.715752][ T4209] udevd[4209]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.803216][ T5974] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 172.950168][ T3579] ntfs3: loop4: ino=1b, Internal error [ 172.971271][ T3579] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 173.045442][ T5992] loop3: detected capacity change from 0 to 256 [ 173.569551][ T6012] loop0: detected capacity change from 0 to 4096 [ 173.641563][ T6007] loop2: detected capacity change from 0 to 8192 [ 173.729350][ T6020] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.885026][ T6023] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.918704][ T6016] loop3: detected capacity change from 0 to 4096 [ 173.935734][ T6022] NILFS (loop0): inode bitmap is inconsistent for reserved inodes [ 173.951652][ T6022] NILFS (loop0): repaired inode bitmap for reserved inodes [ 173.998187][ T6016] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 174.218406][ T6016] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 174.286577][ T3606] ntfs3: loop3: ino=1b, Internal error [ 174.292139][ T3606] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 174.827089][ T6040] loop4: detected capacity change from 0 to 8192 [ 174.839410][ T6037] loop3: detected capacity change from 0 to 4096 [ 175.036608][ T6037] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 175.345541][ T6040] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 175.642927][ T6040] REISERFS (device loop4): using ordered data mode [ 175.652349][ T6040] reiserfs: using flush barriers [ 175.659951][ T6040] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.696767][ T6037] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 175.750779][ T6040] REISERFS (device loop4): checking transaction log (loop4) [ 175.772980][ T6037] ntfs3: loop3: Failed to load $MFT. [ 175.805512][ T6040] REISERFS (device loop4): Using r5 hash to sort names [ 175.833147][ T3552] Bluetooth: hci2: command 0x0406 tx timeout [ 175.839343][ T3552] Bluetooth: hci0: command 0x0406 tx timeout [ 175.843560][ T6040] REISERFS (device loop4): using 3.5.x disk format [ 175.875342][ T6040] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 176.243177][ T6043] loop0: detected capacity change from 0 to 32768 [ 176.305435][ T6083] loop2: detected capacity change from 0 to 64 [ 176.394881][ T6083] hfs: creator requires a 4 character value [ 176.443503][ T6083] hfs: unable to parse mount options [ 176.470342][ T6043] XFS (loop0): Mounting V5 Filesystem [ 176.736733][ T6043] XFS (loop0): Starting recovery (logdev: internal) [ 176.785731][ T6043] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 176.852306][ T6043] XFS (loop0): Unmount and run xfs_repair [ 176.858078][ T6043] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 176.916913][ T6043] 00000000: 41 42 33 42 00 00 00 01 ff ff ff ff ff ff ff ff AB3B............ [ 176.982501][ T6043] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 176.991495][ T6043] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 177.089867][ T6043] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 177.109581][ T6043] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 177.141257][ T6043] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.188681][ T6043] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.211914][ T6043] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 177.214332][ T6127] loop2: detected capacity change from 0 to 512 [ 177.394144][ T6043] XFS (loop0): log mount/recovery failed: error -74 [ 178.202714][ T6127] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.235899][ T6043] XFS (loop0): log mount failed [ 178.343737][ T6127] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.691: bad orphan inode 16 [ 178.451552][ T6127] ext4_test_bit(bit=15, block=4) = 0 [ 178.475537][ T6127] EXT4-fs (loop2): 1 orphan inode deleted [ 178.483480][ T6127] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.610682][ T6141] loop3: detected capacity change from 0 to 512 [ 178.768056][ T6141] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.833173][ T6141] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.698: casefold flag without casefold feature [ 178.855698][ T6111] loop4: detected capacity change from 0 to 32768 [ 178.870026][ T6141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.698: missing EA_INODE flag [ 178.898389][ T6141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.698: error while reading EA inode 12 err=-117 [ 178.914750][ T6141] EXT4-fs (loop3): 1 orphan inode deleted [ 178.921115][ T6141] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,min_batch_time=0x000000007fffffff,auto_da_alloc,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 178.963817][ T6111] XFS: ikeep mount option is deprecated. [ 178.970089][ T6111] XFS: ikeep mount option is deprecated. [ 179.210338][ T6111] XFS (loop4): Mounting V5 Filesystem [ 179.376520][ T6135] loop1: detected capacity change from 0 to 32768 [ 180.164650][ T6135] XFS: attr2 mount option is deprecated. [ 180.192676][ T6135] XFS: ikeep mount option is deprecated. [ 180.241664][ T6111] XFS (loop4): Ending clean mount [ 180.249445][ T6135] XFS: noikeep mount option is deprecated. [ 180.293026][ T6111] XFS (loop4): Quotacheck needed: Please wait. [ 180.476862][ T6111] XFS (loop4): Quotacheck: Done. [ 180.486352][ T6135] XFS (loop1): Mounting V5 Filesystem [ 180.553910][ T4725] XFS (loop4): Unmounting Filesystem [ 180.705491][ T3579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.945644][ T3579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.013831][ T6135] XFS (loop1): Ending clean mount [ 181.126378][ T6135] XFS (loop1): Quotacheck needed: Please wait. [ 181.160111][ T3579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.293022][ T6135] XFS (loop1): Quotacheck: Done. [ 181.339795][ T3579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.351311][ T3502] XFS (loop1): Unmounting Filesystem [ 183.379244][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 183.408539][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 183.542323][ T3247] Bluetooth: hci2: command 0x0409 tx timeout [ 183.912714][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.922885][ T3610] Bluetooth: hci1: command 0x0409 tx timeout [ 183.962505][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.971046][ T6178] device bridge_slave_0 entered promiscuous mode [ 183.985047][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.009342][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.028513][ T6178] device bridge_slave_1 entered promiscuous mode [ 184.040467][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 184.169057][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.211368][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.287554][ T6215] loop2: detected capacity change from 0 to 32768 [ 184.353810][ T6215] XFS: ikeep mount option is deprecated. [ 184.359499][ T6215] XFS: ikeep mount option is deprecated. [ 184.423594][ T6230] loop4: detected capacity change from 0 to 40427 [ 184.458842][ T6230] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 184.472422][ T6230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.484148][ T6215] XFS (loop2): Mounting V5 Filesystem [ 184.492664][ T6230] F2FS-fs (loop4): invalid crc value [ 184.529656][ T6178] team0: Port device team_slave_0 added [ 184.549075][ T6230] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.599569][ T6178] team0: Port device team_slave_1 added [ 184.647111][ T3579] device hsr_slave_0 left promiscuous mode [ 184.652479][ T6215] XFS (loop2): Ending clean mount [ 184.670303][ T3579] device hsr_slave_1 left promiscuous mode [ 184.681486][ T6215] XFS (loop2): Quotacheck needed: Please wait. [ 184.701649][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.714906][ T6230] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 184.721993][ T6230] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.752401][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.801189][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.844792][ T6238] loop1: detected capacity change from 0 to 32768 [ 184.853165][ T6215] XFS (loop2): Quotacheck: Done. [ 184.880671][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.905380][ T6238] XFS: attr2 mount option is deprecated. [ 184.921617][ T6238] XFS: ikeep mount option is deprecated. [ 184.927502][ T6238] XFS: noikeep mount option is deprecated. [ 184.963487][ T3579] device bridge_slave_1 left promiscuous mode [ 184.991880][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.011995][ T3579] device bridge_slave_0 left promiscuous mode [ 185.018677][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.030696][ T4307] XFS (loop2): Unmounting Filesystem [ 185.042215][ T3579] device veth1_macvtap left promiscuous mode [ 185.049156][ T3579] device veth0_macvtap left promiscuous mode [ 185.055907][ T3579] device veth1_vlan left promiscuous mode [ 185.071575][ T6238] XFS (loop1): Mounting V5 Filesystem [ 185.114988][ T3579] device veth0_vlan left promiscuous mode [ 185.283654][ T6238] XFS (loop1): Ending clean mount [ 185.293746][ T6238] XFS (loop1): Quotacheck needed: Please wait. [ 185.368986][ T6238] XFS (loop1): Quotacheck: Done. [ 185.580861][ T3502] XFS (loop1): Unmounting Filesystem [ 185.602629][ T3598] Bluetooth: hci2: command 0x041b tx timeout [ 185.783747][ T6280] loop2: detected capacity change from 0 to 4096 [ 185.866662][ T6280] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 185.889796][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 185.976854][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 185.984629][ T6280] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 186.000373][ T3598] Bluetooth: hci1: command 0x041b tx timeout [ 186.006655][ T6280] ntfs3: loop2: Failed to load $MFT. [ 186.029719][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.041046][ T6285] loop4: detected capacity change from 0 to 2048 [ 186.058026][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.134865][ T6285] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.265429][ T3579] bond0 (unregistering): Released all slaves [ 186.435488][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.446167][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.464906][ T6182] device bridge_slave_0 entered promiscuous mode [ 186.604745][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.611728][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.691443][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.726877][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 186.746497][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.753895][ T6304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.792254][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.800827][ T6182] device bridge_slave_1 entered promiscuous mode [ 186.823755][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.831294][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.952242][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.036197][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.166361][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.255564][ T6178] device hsr_slave_0 entered promiscuous mode [ 187.263827][ T6178] device hsr_slave_1 entered promiscuous mode [ 187.279600][ T6178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.298656][ T6178] Cannot create hsr debugfs directory [ 187.427461][ T6182] team0: Port device team_slave_0 added [ 187.461477][ T6182] team0: Port device team_slave_1 added [ 187.554624][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.565081][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.653787][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.682326][ T3610] Bluetooth: hci2: command 0x040f tx timeout [ 187.711130][ T6308] loop1: detected capacity change from 0 to 32768 [ 187.729185][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.737609][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.794556][ T6327] loop4: detected capacity change from 0 to 4096 [ 187.827266][ T6327] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 187.866767][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.938782][ T6327] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 187.988675][ T6327] ntfs3: loop4: Failed to load $MFT. [ 188.070975][ T6335] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 188.091273][ T3247] Bluetooth: hci1: command 0x040f tx timeout [ 188.112980][ T6182] device hsr_slave_0 entered promiscuous mode [ 188.173575][ T6182] device hsr_slave_1 entered promiscuous mode [ 188.200058][ T6182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.254688][ T6182] Cannot create hsr debugfs directory [ 188.538236][ T6346] loop2: detected capacity change from 0 to 4096 [ 188.690541][ T6359] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.903905][ T6365] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 188.912041][ T6365] NILFS (loop2): repaired inode bitmap for reserved inodes [ 189.069268][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.738'. [ 189.209975][ T6182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.358389][ T6377] loop4: detected capacity change from 0 to 2048 [ 189.481863][ T6182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.506571][ T6377] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.684472][ T6388] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 189.752562][ T3598] Bluetooth: hci2: command 0x0419 tx timeout [ 189.776856][ T6182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.041406][ T6182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.126834][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 190.152556][ T3598] Bluetooth: hci1: command 0x0419 tx timeout [ 190.204466][ T6415] loop1: detected capacity change from 0 to 64 [ 190.385686][ T6178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.458951][ T6178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.556759][ T6178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.602292][ T6178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.740215][ T6182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.829925][ T6182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.862950][ T6182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.896274][ T6441] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 190.936561][ T6182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.151038][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.231614][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.233714][ T6452] loop1: detected capacity change from 0 to 128 [ 191.241358][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.285825][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.325666][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.346150][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.368053][ T3930] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.375223][ T3930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.499116][ T6455] loop2: detected capacity change from 0 to 1024 [ 191.593933][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.612866][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.621893][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.647434][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.661954][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.669151][ T3929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.808010][ T6455] hfsplus: failed to load extents file [ 191.989080][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.134910][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.183496][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.211951][ T6400] loop4: detected capacity change from 0 to 40427 [ 192.220436][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.299063][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.335211][ T6400] F2FS-fs (loop4): invalid crc value [ 192.354277][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.384478][ T6400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.393529][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.423359][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.440156][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.463180][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.466333][ T6400] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 192.498626][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.507677][ T6400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.522102][ T6178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.583586][ T6178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.626056][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.672426][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.681044][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.703780][ T6475] netlink: 'syz.2.766': attribute type 11 has an invalid length. [ 192.742689][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.751581][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.770209][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.777402][ T3929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.816591][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.869845][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.913087][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.962919][ T6482] loop2: detected capacity change from 0 to 512 [ 193.010781][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.017969][ T3929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.279099][ T6482] EXT4-fs (loop2): orphan cleanup on readonly fs [ 193.370973][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.706665][ T6482] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.768: bg 0: block 248: padding at end of block bitmap is not set [ 193.795529][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.809697][ T6482] __quota_error: 13 callbacks suppressed [ 193.809720][ T6482] Quota error (device loop2): write_blk: dquota write failed [ 193.824793][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.831329][ T6482] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 193.864043][ T6482] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.768: Failed to acquire dquot type 1 [ 193.866993][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.891041][ T6482] EXT4-fs (loop2): 1 truncate cleaned up [ 193.908689][ T6482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.911307][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.967562][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.993344][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.001912][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.044848][ T6182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.080481][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.112437][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.120751][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.140173][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.230724][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.248615][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.253212][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.254943][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.314008][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.393472][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.407819][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.473058][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.475111][ T6501] loop2: detected capacity change from 0 to 4096 [ 194.485968][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.488880][ T3552] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.507015][ T6178] device veth0_vlan entered promiscuous mode [ 194.525405][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.534085][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.577294][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.588992][ T6501] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 194.605391][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.636761][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.669747][ T6178] device veth1_vlan entered promiscuous mode [ 194.793116][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.811616][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.821227][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.838252][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.893355][ T6178] device veth0_macvtap entered promiscuous mode [ 194.928870][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.937243][ T3552] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 194.952700][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.960161][ T6501] ntfs3: Cannot use different iocharset when remounting! [ 194.961581][ T3552] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 194.985518][ T6178] device veth1_macvtap entered promiscuous mode [ 194.989646][ T6491] loop1: detected capacity change from 0 to 40427 [ 195.014754][ T6182] device veth0_vlan entered promiscuous mode [ 195.016167][ T3552] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 195.038972][ T3552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.049754][ T6182] device veth1_vlan entered promiscuous mode [ 195.060508][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.071395][ T6496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.078583][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.094741][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.105784][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.124161][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.139713][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.145522][ T6491] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.151934][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.164086][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.173834][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.182792][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.192072][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.200897][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.210246][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.271050][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.292551][ T6491] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 195.299586][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.311298][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.322367][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.322467][ T6491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.337587][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.383104][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.393795][ T3552] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 195.404040][ T6178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.416589][ T3552] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 195.427566][ T6178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.455048][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.466715][ T3552] usb 5-1: USB disconnect, device number 4 [ 195.480664][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.492604][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.508899][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.517315][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.526806][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.594818][ T6178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.619707][ T6178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.629490][ T6178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.638415][ T6178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.651834][ T6182] device veth0_macvtap entered promiscuous mode [ 195.679090][ T3548] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.688763][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.711866][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.721936][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.757752][ T6182] device veth1_macvtap entered promiscuous mode [ 195.845773][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.858122][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.869321][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.890329][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.900561][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.911414][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.923055][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.934409][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.935513][ T3548] usb 3-1: Using ep0 maxpacket: 16 [ 195.947015][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.095951][ T3548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.113799][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.162605][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.165494][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.177141][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.188796][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.190309][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.208699][ T3548] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.213571][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.324358][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.469347][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.579147][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.684449][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.792805][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.931635][ T3548] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.993929][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.003799][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.052178][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.062283][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.073784][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.085401][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.111623][ T3548] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.120702][ T3548] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.141575][ T3548] usb 3-1: Manufacturer: syz [ 197.150311][ T3548] usb 3-1: config 0 descriptor?? [ 197.159828][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.173148][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.185964][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.212660][ T6518] netlink: 'syz.1.776': attribute type 11 has an invalid length. [ 197.241095][ T6182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.293261][ T6182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.302141][ T6182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.312207][ T6182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.353380][ T471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.368247][ T471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.402563][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.624895][ T3548] rc_core: IR keymap rc-hauppauge not found [ 197.631143][ T3548] Registered IR keymap rc-empty [ 197.647470][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.677142][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.692914][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.696425][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.745828][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.749879][ T3548] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 197.780989][ T471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.796802][ T471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.805034][ T3548] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 197.845247][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.875389][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.913519][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.931528][ T3579] device hsr_slave_0 left promiscuous mode [ 197.941455][ T3579] device hsr_slave_1 left promiscuous mode [ 197.945544][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.958896][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.974621][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.988119][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.997726][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.005924][ T3550] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.012654][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.020532][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.044950][ T3579] device bridge_slave_1 left promiscuous mode [ 198.063349][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.065224][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.095613][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.109334][ T3579] device bridge_slave_0 left promiscuous mode [ 198.127092][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.131335][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.159098][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.166511][ T3579] device veth1_macvtap left promiscuous mode [ 198.191281][ T3548] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 198.198629][ T3579] device veth0_macvtap left promiscuous mode [ 198.224495][ T3548] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 198.244179][ T3548] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.248909][ T3579] device veth1_vlan left promiscuous mode [ 198.277088][ T3579] device veth0_vlan left promiscuous mode [ 198.296873][ T3548] usb 3-1: USB disconnect, device number 5 [ 198.417079][ T6534] loop1: detected capacity change from 0 to 32768 [ 198.421868][ T3550] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 198.453864][ T3550] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 198.486608][ T3550] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 198.491050][ T6534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.782 (6534) [ 198.515590][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.587078][ T6536] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.595770][ T6534] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 198.619600][ T6534] BTRFS info (device loop1): force zlib compression, level 3 [ 198.648443][ T6534] BTRFS info (device loop1): enabling auto defrag [ 198.659245][ T6534] BTRFS info (device loop1): enabling disk space caching [ 198.665810][ T6539] loop3: detected capacity change from 0 to 32768 [ 198.690599][ T6534] BTRFS info (device loop1): max_inline at 0 [ 198.697761][ T6534] BTRFS info (device loop1): force clearing of disk cache [ 198.705955][ T6534] BTRFS info (device loop1): turning on sync discard [ 198.712851][ T6534] BTRFS info (device loop1): disk space caching is enabled [ 198.723825][ T6534] BTRFS info (device loop1): has skinny extents [ 198.777176][ T6539] XFS (loop3): Mounting V5 Filesystem [ 198.846826][ T3550] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 198.870457][ T6534] BTRFS info (device loop1): enabling ssd optimizations [ 198.885660][ T6539] XFS (loop3): Starting recovery (logdev: internal) [ 198.904885][ T6534] BTRFS info (device loop1): clearing free space tree [ 198.933776][ T6534] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.945306][ T6534] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.955083][ T3550] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input8 [ 199.026517][ T3550] usb 1-1: USB disconnect, device number 4 [ 199.035754][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 199.054203][ T6570] loop2: detected capacity change from 0 to 8 [ 199.065790][ T6539] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 199.096854][ T6539] XFS (loop3): Unmount and run xfs_repair [ 199.107342][ T6539] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 199.131493][ T6539] 00000000: 41 42 33 42 00 00 00 01 ff ff ff ff ff ff ff ff AB3B............ [ 199.141922][ T6539] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 199.166332][ T6539] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 199.182554][ T6539] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 199.184783][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 199.193085][ T6539] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 199.215778][ T6539] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.256510][ T6539] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.268858][ T6539] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.277730][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 199.302310][ T26] audit: type=1804 audit(1719276538.228:34): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.782" name="/root/syzkaller.vorNr8/177/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 199.338700][ T6534] Invalid ELF header len 1 [ 199.346285][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.347743][ T6539] XFS (loop3): log mount/recovery failed: error -74 [ 199.374249][ T26] audit: type=1800 audit(1719276538.265:35): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.782" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 199.485585][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.521127][ T6539] XFS (loop3): log mount failed [ 200.122134][ T6584] [ 200.124510][ T6584] ====================================================== [ 200.131555][ T6584] WARNING: possible circular locking dependency detected [ 200.138596][ T6584] 5.15.161-syzkaller #0 Not tainted [ 200.143818][ T6584] ------------------------------------------------------ [ 200.150854][ T6584] syz.0.792/6584 is trying to acquire lock: [ 200.156842][ T6584] ffff88807464dc30 (&ei->i_data_sem/1){+.+.}-{3:3}, at: ext4_move_extents+0x3a1/0xe80 [ 200.166453][ T6584] [ 200.166453][ T6584] but task is already holding lock: [ 200.173837][ T6584] ffff888074649668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 200.184591][ T6584] [ 200.184591][ T6584] which lock already depends on the new lock. [ 200.184591][ T6584] [ 200.195011][ T6584] [ 200.195011][ T6584] the existing dependency chain (in reverse order) is: [ 200.204039][ T6584] [ 200.204039][ T6584] -> #3 (&ei->i_data_sem/2){++++}-{3:3}: [ 200.211898][ T6584] lock_acquire+0x1db/0x4f0 [ 200.216963][ T6584] down_read+0x45/0x2e0 [ 200.221682][ T6584] ext4_map_blocks+0x3a6/0x1e00 [ 200.227090][ T6584] ext4_getblk+0x19f/0x710 [ 200.232054][ T6584] ext4_bread+0x2a/0x170 [ 200.236855][ T6584] ext4_quota_write+0x21e/0x580 [ 200.242250][ T6584] get_free_dqblk+0x3a9/0x800 [ 200.247464][ T6584] do_insert_tree+0x2b4/0x1c20 [ 200.252774][ T6584] do_insert_tree+0x6d0/0x1c20 [ 200.258077][ T6584] do_insert_tree+0x6d0/0x1c20 [ 200.263378][ T6584] do_insert_tree+0x6d0/0x1c20 [ 200.268687][ T6584] qtree_write_dquot+0x3b9/0x530 [ 200.274167][ T6584] v2_write_dquot+0x11c/0x190 [ 200.279382][ T6584] dquot_acquire+0x34d/0x680 [ 200.284511][ T6584] ext4_acquire_dquot+0x2eb/0x4a0 [ 200.290088][ T6584] dqget+0x74e/0xe30 [ 200.294515][ T6584] __dquot_initialize+0x45e/0xea0 [ 200.300070][ T6584] ext4_unlink+0x16c/0x530 [ 200.305024][ T6584] vfs_unlink+0x359/0x5f0 [ 200.309979][ T6584] do_unlinkat+0x4a3/0x950 [ 200.314937][ T6584] __x64_sys_unlink+0x45/0x50 [ 200.320167][ T6584] do_syscall_64+0x3b/0xb0 [ 200.325127][ T6584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.331555][ T6584] [ 200.331555][ T6584] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 200.339651][ T6584] lock_acquire+0x1db/0x4f0 [ 200.344697][ T6584] down_read+0x45/0x2e0 [ 200.349493][ T6584] v2_read_dquot+0x4a/0x100 [ 200.354538][ T6584] dquot_acquire+0x188/0x680 [ 200.359757][ T6584] ext4_acquire_dquot+0x2eb/0x4a0 [ 200.365402][ T6584] dqget+0x74e/0xe30 [ 200.369840][ T6584] dquot_set_dqblk+0x27/0xf20 [ 200.375056][ T6584] quota_setquota+0x6d3/0x840 [ 200.380280][ T6584] __se_sys_quotactl+0x2b1/0x770 [ 200.385749][ T6584] do_syscall_64+0x3b/0xb0 [ 200.390707][ T6584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.397146][ T6584] [ 200.397146][ T6584] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 200.405255][ T6584] lock_acquire+0x1db/0x4f0 [ 200.410327][ T6584] __mutex_lock_common+0x1da/0x25a0 [ 200.416082][ T6584] mutex_lock_nested+0x17/0x20 [ 200.421393][ T6584] dquot_commit+0x57/0x510 [ 200.426361][ T6584] ext4_write_dquot+0x1fd/0x360 [ 200.431752][ T6584] mark_all_dquot_dirty+0xf7/0x400 [ 200.437397][ T6584] __dquot_alloc_space+0xdd8/0x1090 [ 200.443136][ T6584] ext4_mb_new_blocks+0x12d8/0x4d60 [ 200.448972][ T6584] ext4_new_meta_blocks+0x206/0x4f0 [ 200.454718][ T6584] ext4_ext_insert_extent+0xf43/0x4e60 [ 200.460715][ T6584] ext4_split_extent_at+0x80e/0x10f0 [ 200.466547][ T6584] ext4_swap_extents+0x136e/0x2340 [ 200.472203][ T6584] move_extent_per_page+0x18b6/0x3010 [ 200.478123][ T6584] ext4_move_extents+0x9e2/0xe80 [ 200.483601][ T6584] ext4_ioctl+0x2fcb/0x5b80 [ 200.488650][ T6584] __se_sys_ioctl+0xf1/0x160 [ 200.493792][ T6584] do_syscall_64+0x3b/0xb0 [ 200.498753][ T6584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.505190][ T6584] [ 200.505190][ T6584] -> #0 (&ei->i_data_sem/1){+.+.}-{3:3}: [ 200.513034][ T6584] validate_chain+0x1649/0x5930 [ 200.518426][ T6584] __lock_acquire+0x1295/0x1ff0 [ 200.523821][ T6584] lock_acquire+0x1db/0x4f0 [ 200.528957][ T6584] down_write_nested+0x3b/0x60 [ 200.534278][ T6584] ext4_move_extents+0x3a1/0xe80 [ 200.539766][ T6584] ext4_ioctl+0x2fcb/0x5b80 [ 200.544808][ T6584] __se_sys_ioctl+0xf1/0x160 [ 200.549948][ T6584] do_syscall_64+0x3b/0xb0 [ 200.554916][ T6584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.561352][ T6584] [ 200.561352][ T6584] other info that might help us debug this: [ 200.561352][ T6584] [ 200.571588][ T6584] Chain exists of: [ 200.571588][ T6584] &ei->i_data_sem/1 --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 200.571588][ T6584] [ 200.585453][ T6584] Possible unsafe locking scenario: [ 200.585453][ T6584] [ 200.592915][ T6584] CPU0 CPU1 [ 200.598317][ T6584] ---- ---- [ 200.603695][ T6584] lock(&ei->i_data_sem/2); [ 200.608312][ T6584] lock(&s->s_dquot.dqio_sem); [ 200.615717][ T6584] lock(&ei->i_data_sem/2); [ 200.622856][ T6584] lock(&ei->i_data_sem/1); [ 200.627480][ T6584] [ 200.627480][ T6584] *** DEADLOCK *** [ 200.627480][ T6584] [ 200.635636][ T6584] 4 locks held by syz.0.792/6584: [ 200.640690][ T6584] #0: ffff888024a38460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 200.650412][ T6584] #1: ffff8880746497e0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: lock_two_nondirectories+0xde/0x130 [ 200.661694][ T6584] #2: ffff88807464dda8 (&sb->s_type->i_mutex_key#9/4){+.+.}-{3:3}, at: ext4_move_extents+0x386/0xe80 [ 200.672709][ T6584] #3: ffff888074649668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_double_down_write_data_sem+0x28/0x40 [ 200.683811][ T6584] [ 200.683811][ T6584] stack backtrace: [ 200.689722][ T6584] CPU: 0 PID: 6584 Comm: syz.0.792 Not tainted 5.15.161-syzkaller #0 [ 200.697803][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.707874][ T6584] Call Trace: [ 200.711260][ T6584] [ 200.714206][ T6584] dump_stack_lvl+0x1e3/0x2d0 [ 200.718918][ T6584] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 200.724580][ T6584] ? print_circular_bug+0x12b/0x1a0 [ 200.729902][ T6584] check_noncircular+0x2f8/0x3b0 [ 200.734884][ T6584] ? add_chain_block+0x850/0x850 [ 200.739851][ T6584] ? lockdep_lock+0x11f/0x2a0 [ 200.744567][ T6584] ? finish_lock_switch+0x8f/0x100 [ 200.749701][ T6584] ? finish_task_switch+0x134/0x630 [ 200.755058][ T6584] ? _find_first_zero_bit+0xcf/0xf0 [ 200.760286][ T6584] validate_chain+0x1649/0x5930 [ 200.765176][ T6584] ? reacquire_held_locks+0x660/0x660 [ 200.770573][ T6584] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 200.776743][ T6584] ? release_firmware_map_entry+0x190/0x190 [ 200.782659][ T6584] ? look_up_lock_class+0x77/0x120 [ 200.787788][ T6584] ? register_lock_class+0x100/0x9a0 [ 200.793092][ T6584] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 200.799087][ T6584] ? is_dynamic_key+0x1f0/0x1f0 [ 200.803962][ T6584] ? mark_lock+0x98/0x340 [ 200.808324][ T6584] __lock_acquire+0x1295/0x1ff0 [ 200.813286][ T6584] lock_acquire+0x1db/0x4f0 [ 200.817804][ T6584] ? ext4_move_extents+0x3a1/0xe80 [ 200.822936][ T6584] ? read_lock_is_recursive+0x10/0x10 [ 200.828325][ T6584] ? __might_sleep+0xc0/0xc0 [ 200.832933][ T6584] ? rwsem_write_trylock+0x166/0x210 [ 200.838248][ T6584] ? inode_owner_or_capable+0x210/0x210 [ 200.843942][ T6584] ? clear_nonspinnable+0x60/0x60 [ 200.849033][ T6584] down_write_nested+0x3b/0x60 [ 200.853830][ T6584] ? ext4_move_extents+0x3a1/0xe80 [ 200.858972][ T6584] ext4_move_extents+0x3a1/0xe80 [ 200.863959][ T6584] ? rcu_read_lock_any_held+0xb3/0x160 [ 200.869458][ T6584] ? ext4_double_up_write_data_sem+0x30/0x30 [ 200.875478][ T6584] ? lockdep_hardirqs_off+0x70/0x100 [ 200.880802][ T6584] ext4_ioctl+0x2fcb/0x5b80 [ 200.885314][ T6584] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 200.891467][ T6584] ? do_vfs_ioctl+0x1b66/0x2b70 [ 200.896426][ T6584] ? ext4_fileattr_set+0x1750/0x1750 [ 200.901742][ T6584] ? __x64_compat_sys_ioctl+0x80/0x80 [ 200.907122][ T6584] ? __lock_acquire+0x1ff0/0x1ff0 [ 200.912141][ T6584] ? slab_free_freelist_hook+0xdd/0x160 [ 200.917695][ T6584] ? tomoyo_path_number_perm+0x648/0x810 [ 200.923641][ T6584] ? kfree+0xf1/0x270 [ 200.927624][ T6584] ? tomoyo_path_number_perm+0x6ab/0x810 [ 200.933257][ T6584] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 200.938734][ T6584] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 200.944906][ T6584] ? lockdep_hardirqs_on+0x94/0x130 [ 200.950280][ T6584] ? bpf_lsm_file_ioctl+0x5/0x10 [ 200.955212][ T6584] ? security_file_ioctl+0x7d/0xa0 [ 200.960325][ T6584] ? ext4_fileattr_set+0x1750/0x1750 [ 200.965627][ T6584] __se_sys_ioctl+0xf1/0x160 [ 200.970215][ T6584] do_syscall_64+0x3b/0xb0 [ 200.974629][ T6584] ? clear_bhb_loop+0x15/0x70 [ 200.979302][ T6584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.985217][ T6584] RIP: 0033:0x7fbb915fad39 [ 200.989631][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.009361][ T6584] RSP: 002b:00007fbb9007b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.017784][ T6584] RAX: ffffffffffffffda RBX: 00007fbb91788fa0 RCX: 00007fbb915fad39 [ 201.025754][ T6584] RDX: 0000000020000080 RSI: 00000000c028660f RDI: 0000000000000004 [ 201.033722][ T6584] RBP: 00007fbb9167b766 R08: 0000000000000000 R09: 0000000000000000 [ 201.041714][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.049681][ T6584] R13: 000000000000000b R14: 00007fbb91788fa0 R15: 00007ffd84a91948 [ 201.057670][ T6584] [ 201.092191][ T3579] bond0 (unregistering): Released all slaves [ 201.152526][ T6588] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 201.410333][ T6588] usb 3-1: Using ep0 maxpacket: 16 [ 201.537549][ T6588] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 201.545891][ T6588] usb 3-1: config 0 has no interface number 0 [ 201.719178][ T6588] usb 3-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice=c1.2e [ 201.728583][ T6588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.740019][ T6588] usb 3-1: Product: syz [ 201.744532][ T6588] usb 3-1: Manufacturer: syz [ 201.749209][ T6588] usb 3-1: SerialNumber: syz [ 201.758265][ T6588] usb 3-1: config 0 descriptor?? [ 202.062530][ T6588] usb 3-1: USB disconnect, device number 6