last executing test programs: 39.038768895s ago: executing program 1 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 38.593473384s ago: executing program 1 (id=87): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x20}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) 38.373221693s ago: executing program 1 (id=88): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000001000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001"], 0x48) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x3f, 0x0, 0x0, 0x20000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) 38.093756232s ago: executing program 1 (id=91): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000001140)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a6ef932729de77bc8a67c56b8dc252aeb457f356beddd4fe8a45aaef1744f717c71738086a69f819bf8ec2164ad9d22599682f7b440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES64=r0, @ANYRES8=0x0, @ANYBLOB="d60a83a1f0457481edbb22ba9409462e156a7c242a", @ANYRES32, @ANYRES8, @ANYRES16, @ANYRES32=r0, @ANYBLOB="347445339386d85b589f54b48bc5dec05d0e7040577884adaefdd179349de32ef2ed968d2ba3de33f84369c9ec8cc7511c217211f5c82147804cad02a4015673d5363a", @ANYBLOB="171263d59f8cbffd0f9f9a2ef9a5f6b326c119f2d43929f3"], 0x10, 0x1c4, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 37.103306689s ago: executing program 1 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x46, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 35.757371954s ago: executing program 1 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 35.654711254s ago: executing program 32 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 20.510961241s ago: executing program 0 (id=196): socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x2, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x8, 0xa, 0x3ff, 0xf7, 0x7, 0x9}}, {{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000054) 18.830431985s ago: executing program 0 (id=216): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047453, 0x0) 18.759720815s ago: executing program 0 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000180)='./bus/file0\x00', 0x40) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x6, 0x2, 0x0, 0x80000000}) 18.626330865s ago: executing program 0 (id=218): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.976211262s ago: executing program 0 (id=219): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 17.529284631s ago: executing program 0 (id=221): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 17.42930505s ago: executing program 33 (id=221): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 7.237082856s ago: executing program 4 (id=291): r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x8100, @tipc={{0x5, 0x4, 0x2, 0x0, 0x3c, 0x67, 0x0, 0x9, 0x6, 0x0, @remote, @loopback}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x1, 0x0, 0x0, 0x5, 0x2, 0x1, 0x4e21, 0x4e23, 0x3, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) 6.634987833s ago: executing program 4 (id=299): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 6.447095042s ago: executing program 4 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x12, 0xa10, &(0x7f00000001c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0x9, 0x5, 0x0, 0x400, 0x5, 0x24, 0x40, 0x4e, 0x83, 0x8, 0x8, 0x0, 0xff, 0x8, 0x7, 0x5, 0x0, 0x64, '\x00', 0xff, 0x8}) 6.036044181s ago: executing program 4 (id=308): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001300)={[{@nodiscard}, {@errors_continue}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@block_validity}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 4.936172887s ago: executing program 4 (id=311): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000003c0)={[{@nodiscard}, {@nodiscard}, {@noquota}, {@init_itable}, {@sb={'sb', 0x3d, 0x7}}, {@resgid}, {@sysvgroups}, {}, {@dioread_lock}]}, 0x10, 0x4d2, &(0x7f0000002d00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) readv(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) 4.459827485s ago: executing program 4 (id=315): r0 = syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x62dd, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file1\x00', 0x400, &(0x7f00000001c0), 0xfe, 0x24d, &(0x7f0000001000)="$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") 4.105183614s ago: executing program 34 (id=315): r0 = syz_io_uring_setup(0x1eb1, &(0x7f0000000480)={0x0, 0x100000, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x62dd, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file1\x00', 0x400, &(0x7f00000001c0), 0xfe, 0x24d, &(0x7f0000001000)="$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") 2.649267419s ago: executing program 2 (id=326): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7ffffffff002, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir\x00', 0x41c0b1, 0x108) 2.541870009s ago: executing program 6 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r1, 0x9, 0x0) 2.292001648s ago: executing program 6 (id=330): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000005180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/121, 0x79}], 0x6}}], 0x1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.110654067s ago: executing program 6 (id=332): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 1.820139876s ago: executing program 6 (id=333): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f0000000f80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x73d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000002e00), &(0x7f0000000200)='./file0\x00', 0x1821482, &(0x7f0000002e40)=ANY=[], 0x1, 0x19b, &(0x7f0000000440)="$eJzs0b9rE3EYx/H3871vkotQNSoOdWjA4nmh0twVHZyCU4UcOLgIBg3p2RavSnpZWlrMIgWp9l/QSUcVdBLRf6A4CA5aFzdphuIgDhK53DeCf4Pf1/K557nnfj23lHbTEvD7YKNDgxGHw3xA0MCU5D2l8nxt6u8md/Lgkqm3TT4zOZmurd9uJ0m8Wr1YpfJPA/hRLVXgbyt9wUlFWWggnw42Om25GTFssKIWIipNag9xWnT9R0zqCU7cEBh621xWdMVrwpHZnstsurZ+bnmlvRgvxnfCcO7CPer189n7J3H9FeI/EMVjNvEjShFlf5NCi/u7+hAzgvhLas+R2oBii51d5+zpmQHK32eI8M4bUPqii6irnMG9nn3QPMeFJzgR002OKjS3lpO4Po9cUS8l0B/1z4LC7TuO27mbLGxdU/Kr+LQh+64E3yh4AWEtYC5bDcd4z9Yefca+MiVvsqeM96pH556b6lTZzPV6q0ExO/Aiwj6EFZgY3U5FTGc/mLduPmou5bNgWZZlWZZlWZZl/Tf+BAAA//+GvFqn") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x31, 0x1, 0x9, 0x7, 0xb, 0xd}) 1.819808636s ago: executing program 2 (id=334): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x2000]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1.574087666s ago: executing program 2 (id=337): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80087601, 0xffffffffffffffff) 1.452112305s ago: executing program 5 (id=338): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x0, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000023c0)={0x20, 0x0, 0x0, {0x2, 0x4, 0x6, 0x8}}, 0x20) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x1029, r4, 0x0) write$binfmt_misc(r1, &(0x7f0000000b00), 0x91) splice(r0, 0x0, r3, 0x0, 0x91, 0x3) 1.442320935s ago: executing program 3 (id=339): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0xa000001a}) r3 = dup3(r2, r1, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0x200f, 0x300}) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r0, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0xfe}) 1.349575065s ago: executing program 3 (id=340): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x1000)=nil, 0x1000}}) 1.292250055s ago: executing program 5 (id=341): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x15, 0x1, 0x3}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1.197244234s ago: executing program 6 (id=342): unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) 1.164360284s ago: executing program 5 (id=343): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x9e8, 0x358, 0x358, 0x9e8, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff000000, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.067593804s ago: executing program 2 (id=344): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 915.490943ms ago: executing program 5 (id=345): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x2004040, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0xf, 0x2a0, &(0x7f00000004c0)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0xa294f4c1f49d5a17) write$P9_RREADDIR(r0, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x100006}}, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet(0x2, 0x2, 0x1) 760.483153ms ago: executing program 3 (id=346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 608.175562ms ago: executing program 3 (id=347): r0 = io_uring_setup(0x1fa, &(0x7f0000002400)={0x0, 0x1e19, 0x0, 0x1, 0x219}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 601.821432ms ago: executing program 5 (id=348): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES32=r0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 517.980092ms ago: executing program 3 (id=349): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r1 = fanotify_init(0x0, 0x40000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x14) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, 0x0, 0x0) 416.079482ms ago: executing program 2 (id=350): socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 388.810302ms ago: executing program 6 (id=351): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 169.93877ms ago: executing program 35 (id=351): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 151.91072ms ago: executing program 5 (id=353): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000000045, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008007196ead3369bb32f2bac496fd22a0000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 151.669971ms ago: executing program 2 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 0s ago: executing program 3 (id=355): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4444, &(0x7f000000cd00)="$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") creat(0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1004, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x44240, 0x100) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r1 = creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.45' (ED25519) to the list of known hosts. [ 50.983167][ T4151] cgroup: Unknown subsys name 'net' [ 51.089325][ T4151] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.422794][ T4151] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.758700][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 53.799373][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 53.881780][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 53.892120][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 53.928894][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 53.973819][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.981716][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.989560][ T4166] device bridge_slave_0 entered promiscuous mode [ 54.022810][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.029915][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.038624][ T4166] device bridge_slave_1 entered promiscuous mode [ 54.046867][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.053957][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.062078][ T4170] device bridge_slave_0 entered promiscuous mode [ 54.087487][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.094690][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.103042][ T4170] device bridge_slave_1 entered promiscuous mode [ 54.157922][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.189857][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.197189][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.205780][ T4171] device bridge_slave_0 entered promiscuous mode [ 54.214835][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.226134][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.235584][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.243413][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.251388][ T4179] device bridge_slave_0 entered promiscuous mode [ 54.266838][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.274116][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.282345][ T4171] device bridge_slave_1 entered promiscuous mode [ 54.302319][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.319890][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.327089][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.335522][ T4179] device bridge_slave_1 entered promiscuous mode [ 54.342499][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.349557][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.357838][ T4172] device bridge_slave_0 entered promiscuous mode [ 54.401926][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.409018][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.416950][ T4172] device bridge_slave_1 entered promiscuous mode [ 54.425799][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.438091][ T4166] team0: Port device team_slave_0 added [ 54.446717][ T4170] team0: Port device team_slave_0 added [ 54.454707][ T4170] team0: Port device team_slave_1 added [ 54.475569][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.486627][ T4166] team0: Port device team_slave_1 added [ 54.502678][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.545457][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.556278][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.574627][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.581804][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.608028][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.620664][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.627609][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.653713][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.674399][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.694437][ T4171] team0: Port device team_slave_0 added [ 54.700956][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.707902][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.734032][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.750804][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.757751][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.783749][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.804184][ T4179] team0: Port device team_slave_0 added [ 54.811601][ T4171] team0: Port device team_slave_1 added [ 54.819233][ T4179] team0: Port device team_slave_1 added [ 54.889676][ T4172] team0: Port device team_slave_0 added [ 54.906370][ T4166] device hsr_slave_0 entered promiscuous mode [ 54.913615][ T4166] device hsr_slave_1 entered promiscuous mode [ 54.932644][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.939597][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.966041][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.985290][ T4172] team0: Port device team_slave_1 added [ 54.991788][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.998724][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.024777][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.040364][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.047309][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.073699][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.086043][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.093195][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.119430][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.134212][ T4170] device hsr_slave_0 entered promiscuous mode [ 55.141107][ T4170] device hsr_slave_1 entered promiscuous mode [ 55.147804][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.155701][ T4170] Cannot create hsr debugfs directory [ 55.208761][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.216608][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.242989][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.282108][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.289088][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.315270][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.371662][ T4171] device hsr_slave_0 entered promiscuous mode [ 55.378552][ T4171] device hsr_slave_1 entered promiscuous mode [ 55.385487][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.393166][ T4171] Cannot create hsr debugfs directory [ 55.401598][ T2856] Bluetooth: hci0: command 0x0409 tx timeout [ 55.403165][ T4179] device hsr_slave_0 entered promiscuous mode [ 55.415332][ T4179] device hsr_slave_1 entered promiscuous mode [ 55.421945][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.429484][ T4179] Cannot create hsr debugfs directory [ 55.480282][ T4176] Bluetooth: hci4: command 0x0409 tx timeout [ 55.480388][ T2856] Bluetooth: hci1: command 0x0409 tx timeout [ 55.486331][ T4176] Bluetooth: hci2: command 0x0409 tx timeout [ 55.504086][ T4176] Bluetooth: hci3: command 0x0409 tx timeout [ 55.536332][ T4172] device hsr_slave_0 entered promiscuous mode [ 55.543266][ T4172] device hsr_slave_1 entered promiscuous mode [ 55.549765][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.557708][ T4172] Cannot create hsr debugfs directory [ 55.742462][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.764321][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.787860][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.801098][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.841541][ T4170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.850911][ T4170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.861529][ T4170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.874800][ T4170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.952065][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.976424][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.986278][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.005109][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.032059][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.075700][ T4179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.093551][ T4179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.112838][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.123215][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.142130][ T4179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.152732][ T4179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.185883][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.196444][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.217403][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.228612][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.238493][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.247928][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.255139][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.265637][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.297987][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.316738][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.323878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.333149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.341671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.349359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.358241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.367578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.376356][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383449][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.391588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.411653][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.446200][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.455695][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.465562][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.472660][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.484634][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.493363][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.502853][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.511781][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.520901][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.529262][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.536345][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.544119][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.553488][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.562140][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.571505][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.579855][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.586934][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.594754][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.603618][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.612386][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.621515][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.629825][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.638304][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.647047][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.655102][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.663248][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.671638][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.688204][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.726139][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.746638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.759221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.768488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.777336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.786395][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.793486][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.803101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.812102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.821015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.829516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.838481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.853486][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.863372][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.878477][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.893078][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.903586][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.916098][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.928139][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.937465][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.953056][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.969078][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.977759][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.990011][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.005054][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.032814][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.042128][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.049970][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.066180][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.077287][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.084636][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.093534][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.102188][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.110712][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.117771][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.125617][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.135154][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.143983][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.156746][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.165355][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.187418][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.200506][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.219609][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.246271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.255297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.266968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.276093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.285589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.294687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.305165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.339061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.351679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.374473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.383381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.393818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.407390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.417487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.431935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.442143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.457421][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.481610][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 57.505252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.514807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.538950][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.554651][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.560635][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 57.571352][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.575209][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 57.585833][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 57.600673][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 57.617308][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.631766][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.642934][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.651916][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.659305][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.668797][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.687580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.697671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.728375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.736477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.749080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.756924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.764847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.773293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.782321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.790049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.799189][ T4170] device veth0_vlan entered promiscuous mode [ 57.812828][ T4166] device veth0_vlan entered promiscuous mode [ 57.826759][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.839314][ T4170] device veth1_vlan entered promiscuous mode [ 57.846864][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.855211][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.864123][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.888727][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.896986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.905049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.921311][ T4166] device veth1_vlan entered promiscuous mode [ 57.942304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.951623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.959534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.969920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.978650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.987287][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.994392][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.003064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.011759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.020136][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.027181][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.035385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.066266][ T4171] device veth0_vlan entered promiscuous mode [ 58.079820][ T4171] device veth1_vlan entered promiscuous mode [ 58.091195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.102891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.113511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.123179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.132045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.140380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.148639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.157109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.166555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.175389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.183469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.192043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.218285][ T4170] device veth0_macvtap entered promiscuous mode [ 58.234348][ T4170] device veth1_macvtap entered promiscuous mode [ 58.244761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.253211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.261762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.270995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.278900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.322586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.337587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.346580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.355503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.385128][ T4166] device veth0_macvtap entered promiscuous mode [ 58.394635][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.404772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.414538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.423924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.433122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.443859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.452964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.461615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.470072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.478602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.487642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.496730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.506016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.514199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.536475][ T4171] device veth0_macvtap entered promiscuous mode [ 58.544099][ T4179] device veth0_vlan entered promiscuous mode [ 58.553123][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.568163][ T4166] device veth1_macvtap entered promiscuous mode [ 58.578063][ T4171] device veth1_macvtap entered promiscuous mode [ 58.588632][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.604243][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.613358][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.622835][ T4170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.631895][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.657243][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.668986][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.686599][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.695602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.704888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.717994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.726243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.735273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.744909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.753672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.765983][ T4179] device veth1_vlan entered promiscuous mode [ 58.788591][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.801909][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.812145][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.822949][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.834595][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.847094][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.865396][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.879465][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.911006][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.922085][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.933815][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.945368][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.956394][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.971732][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.979798][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.989317][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.998340][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.008146][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.017005][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.025938][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.033978][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.041573][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.053048][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.065572][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.074760][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.084765][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.093790][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.112259][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.122324][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.136472][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.145608][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.168557][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.205295][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.214727][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.247876][ T4179] device veth0_macvtap entered promiscuous mode [ 59.331412][ T4179] device veth1_macvtap entered promiscuous mode [ 59.384632][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.411833][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.428866][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.451069][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.461251][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.472019][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.482634][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.494902][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.507358][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.518853][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.528935][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.537092][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.544926][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.554857][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.563397][ T4207] Bluetooth: hci0: command 0x040f tx timeout [ 59.583243][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.595866][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.606137][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.616893][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.627012][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.637486][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.647490][ T4207] Bluetooth: hci4: command 0x040f tx timeout [ 59.649226][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.654047][ T4207] Bluetooth: hci1: command 0x040f tx timeout [ 59.654120][ T4207] Bluetooth: hci2: command 0x040f tx timeout [ 59.654182][ T4207] Bluetooth: hci3: command 0x040f tx timeout [ 59.684915][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.693615][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.703091][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.711755][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.723929][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.726482][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.733257][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.748870][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.758469][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.767704][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.780006][ T4179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.792658][ T4179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.802401][ T4179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.811427][ T4179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.828748][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.848111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.857825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.865936][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.869504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.882335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.895661][ T4172] device veth0_vlan entered promiscuous mode [ 59.920579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.935446][ T4172] device veth1_vlan entered promiscuous mode [ 59.959686][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.964693][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.980759][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.990716][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.004255][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.013443][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.048133][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.106263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.145262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.195295][ T26] audit: type=1326 audit(1737572417.207:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bbe3a9d29 code=0x7ffc0000 [ 60.219854][ T4172] device veth0_macvtap entered promiscuous mode [ 60.247617][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.266521][ T4172] device veth1_macvtap entered promiscuous mode [ 60.282950][ T26] audit: type=1326 audit(1737572417.207:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6bbe3a9d29 code=0x7ffc0000 [ 60.287584][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.333222][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.357011][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.390583][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.416969][ T26] audit: type=1326 audit(1737572417.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bbe3a9d29 code=0x7ffc0000 [ 60.450788][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.464643][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.490417][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.500638][ T26] audit: type=1326 audit(1737572417.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f6bbe3a9d29 code=0x7ffc0000 [ 60.529162][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.540199][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.551561][ T26] audit: type=1326 audit(1737572417.207:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4242 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bbe3a9d29 code=0x7ffc0000 [ 60.559706][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.584433][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.597274][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.646001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.663493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.672673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.685664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.697018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.706634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.757201][ T4255] Zero length message leads to an empty skb [ 60.782728][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.800719][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.820592][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.846538][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.858287][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.889737][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.900124][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.915056][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.936275][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.960615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.969387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.049576][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.071841][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.081988][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.092045][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.277327][ T26] audit: type=1326 audit(1737572418.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.1.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5f14ebd29 code=0x0 [ 61.306706][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.345098][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.392676][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.439821][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.446791][ T4282] loop1: detected capacity change from 0 to 2048 [ 61.455462][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.506162][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.531339][ T4282] ======================================================= [ 61.531339][ T4282] WARNING: The mand mount option has been deprecated and [ 61.531339][ T4282] and is ignored by this kernel. Remove the mand [ 61.531339][ T4282] option from the mount to silence this warning. [ 61.531339][ T4282] ======================================================= [ 61.531641][ T4287] syz.0.20 sent an empty control message without MSG_MORE. [ 61.641697][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 61.650224][ T4282] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 61.679068][ T4282] UDF-fs: Scanning with blocksize 512 failed [ 61.721226][ T4211] Bluetooth: hci3: command 0x0419 tx timeout [ 61.728433][ T4211] Bluetooth: hci2: command 0x0419 tx timeout [ 61.742324][ T4282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.758311][ T4211] Bluetooth: hci1: command 0x0419 tx timeout [ 61.770257][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 62.105521][ T4310] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 62.315761][ T4318] loop3: detected capacity change from 0 to 1024 [ 62.368794][ T4318] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.407363][ T4318] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 62.419381][ T4318] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 62.434851][ T4318] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: comm syz.3.28: inode #1: comm syz.3.28: iget: illegal inode # [ 62.454873][ T4318] EXT4-fs (loop3): no journal found [ 62.730304][ T4283] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.847417][ T4335] loop2: detected capacity change from 0 to 1024 [ 62.902871][ T4337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.140076][ T4343] loop4: detected capacity change from 0 to 128 [ 63.161394][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.173767][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.184283][ T4283] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.193541][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.202722][ T4343] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.246818][ T4283] usb 1-1: config 0 descriptor?? [ 63.267505][ T4343] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.373033][ T4349] loop1: detected capacity change from 0 to 256 [ 63.405953][ T4343] process 'syz.4.38' launched './file1' with NULL argv: empty string added [ 63.606685][ T4240] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.728604][ T4283] hid (null): bogus close delimiter [ 63.742714][ T4363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 63.810645][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 63.981748][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 64.021456][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 64.143367][ T4358] loop3: detected capacity change from 0 to 32768 [ 64.220248][ T4211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.253531][ T4358] XFS (loop3): Mounting V5 Filesystem [ 64.345607][ T4358] XFS (loop3): Ending clean mount [ 64.367771][ T4283] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 64.455749][ T4283] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 64.492149][ T4283] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 64.564649][ T4170] XFS (loop3): Unmounting Filesystem [ 64.620839][ T4211] usb 2-1: config 252 has an invalid interface number: 12 but max is 0 [ 64.633899][ T4211] usb 2-1: config 252 has no interface number 0 [ 64.660278][ T4283] usb 1-1: USB disconnect, device number 2 [ 64.807973][ T4399] loop4: detected capacity change from 0 to 256 [ 64.831062][ T4211] usb 2-1: New USB device found, idVendor=7392, idProduct=a611, bcdDevice=70.dc [ 64.841030][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.849144][ T4211] usb 2-1: Product: syz [ 64.854347][ T4211] usb 2-1: Manufacturer: syz [ 64.871285][ T4211] usb 2-1: SerialNumber: syz [ 64.889498][ T4399] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 65.795726][ T4441] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.899384][ T4211] usb 2-1: USB disconnect, device number 2 [ 66.030776][ T4427] loop4: detected capacity change from 0 to 32768 [ 66.227621][ T4427] XFS (loop4): Mounting V5 Filesystem [ 66.240213][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.323294][ T4464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'. [ 66.368734][ T4427] XFS (loop4): Ending clean mount [ 66.405838][ T4454] ptrace attach of "./syz-executor exec"[4459] was attempted by "\x5c"[4454] [ 66.439029][ T4427] XFS (loop4): Quotacheck needed: Please wait. [ 66.485798][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 66.543212][ T4427] XFS (loop4): Quotacheck: Done. [ 66.598464][ T4449] loop2: detected capacity change from 0 to 32768 [ 66.620487][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.647435][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.667684][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.691939][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.711840][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.721824][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.779571][ T4449] XFS (loop2): Mounting V5 Filesystem [ 66.796002][ T4469] loop0: detected capacity change from 0 to 512 [ 66.807616][ T4172] XFS (loop4): Unmounting Filesystem [ 66.981757][ T4469] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.82: iget: bogus i_mode (0) [ 66.992938][ T23] usb 4-1: usb_control_msg returned -32 [ 66.993000][ T23] usbtmc 4-1:16.0: can't read capabilities [ 67.016566][ T4469] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.82: couldn't read orphan inode 17 (err -117) [ 67.034424][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.060242][ T4449] XFS (loop2): Ending clean mount [ 67.140402][ T4483] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.229532][ T4171] XFS (loop2): Unmounting Filesystem [ 67.354409][ T4488] loop0: detected capacity change from 0 to 128 [ 67.415285][ T4488] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 67.440436][ T4488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.796589][ T4500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.89'. [ 67.898614][ T4503] loop1: detected capacity change from 0 to 512 [ 67.964370][ T4504] loop2: detected capacity change from 0 to 2048 [ 68.010942][ T4504] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 68.025482][ T4504] UDF-fs: Scanning with blocksize 512 failed [ 68.053585][ T4504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.172497][ T4503] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.91: inode #1: comm syz.1.91: iget: illegal inode # [ 68.240417][ T4212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.275562][ T4503] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.91: error while reading EA inode 1 err=-117 [ 68.292521][ T4503] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.307009][ T4503] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.91: inode #1: comm syz.1.91: iget: illegal inode # [ 68.353500][ T4503] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.91: error while reading EA inode 1 err=-117 [ 68.374280][ T4503] EXT4-fs (loop1): 1 orphan inode deleted [ 68.386843][ T4503] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,stripe=0x0000000000000000,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 68.505107][ T4212] usb 5-1: Using ep0 maxpacket: 32 [ 68.558365][ T4522] loop0: detected capacity change from 0 to 512 [ 68.630514][ T4212] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 68.647021][ T4212] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.657799][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.668631][ T4212] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 68.682604][ T4212] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.696390][ T4212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.715665][ T4166] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 68.736033][ T4522] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.752979][ T4166] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 68.773132][ T4166] EXT4-fs error (device loop1): ext4_free_branches:1043: inode #13: block 234881024: comm syz-executor: Read failure [ 68.825988][ T4166] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 68.868234][ T4166] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 68.884321][ T4522] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 14: comm syz.0.98: lblock 1 mapped to illegal pblock 14 (length 1) [ 68.912378][ T4212] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 68.921574][ T4212] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 68.930015][ T4212] usb 5-1: Product: syz [ 68.937421][ T4166] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 68.949318][ T4212] usb 5-1: Manufacturer: syz [ 68.960168][ T4212] usb 5-1: SerialNumber: syz [ 68.966063][ T4522] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 2 [ 68.968535][ T4212] usb 5-1: config 0 descriptor?? [ 68.998170][ T4211] usb 4-1: USB disconnect, device number 2 [ 69.014165][ T4522] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 69.046641][ T4212] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.070195][ T4522] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.98: Failed to acquire dquot type 0 [ 69.089711][ T4212] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 69.429625][ T4207] usb 5-1: USB disconnect, device number 2 [ 69.453724][ T4207] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 69.460795][ T4532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.102'. [ 69.561695][ T4526] loop2: detected capacity change from 0 to 32768 [ 69.717575][ T4526] XFS (loop2): Mounting V5 Filesystem [ 69.894714][ T4526] XFS (loop2): Ending clean mount [ 69.945940][ T4240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.072907][ T4240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.151268][ T4171] XFS (loop2): Unmounting Filesystem [ 70.161216][ T4240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.255638][ T4240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.649067][ T4573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.117'. [ 71.040375][ T4207] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.160760][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.169400][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.302968][ T4207] usb 1-1: Using ep0 maxpacket: 8 [ 71.377288][ T26] audit: type=1326 audit(1737572428.387:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4596 comm="syz.2.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e8d6d29 code=0x0 [ 71.430472][ T4207] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 71.439600][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.463271][ T4207] usb 1-1: config 0 descriptor?? [ 71.483264][ T4599] sctp: [Deprecated]: syz.2.120 (pid 4599) Use of int in max_burst socket option deprecated. [ 71.483264][ T4599] Use struct sctp_assoc_value instead [ 71.620071][ T4575] chnl_net:caif_netlink_parms(): no params data found [ 71.904934][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.920052][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.932110][ T4575] device bridge_slave_0 entered promiscuous mode [ 71.942793][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.967526][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.005903][ T4575] device bridge_slave_1 entered promiscuous mode [ 72.054900][ T4575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.068037][ T4575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.125752][ T4575] team0: Port device team_slave_0 added [ 72.136957][ T4575] team0: Port device team_slave_1 added [ 72.253736][ T4575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.274786][ T4575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.338854][ T4575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.366348][ T4575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.393322][ T4575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.456635][ T4575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.492647][ T4624] device netdevsim0 entered promiscuous mode [ 72.688260][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.695755][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.764961][ T2856] Bluetooth: hci0: command 0x0409 tx timeout [ 73.029350][ T4575] device hsr_slave_0 entered promiscuous mode [ 73.041831][ T4575] device hsr_slave_1 entered promiscuous mode [ 73.053220][ T4575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.067925][ T4575] Cannot create hsr debugfs directory [ 73.250355][ T4207] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.282462][ T4207] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 73.313666][ T4207] asix: probe of 1-1:0.0 failed with error -71 [ 73.380712][ T4207] usb 1-1: USB disconnect, device number 3 [ 73.483088][ T4240] device hsr_slave_0 left promiscuous mode [ 73.496108][ T4240] device hsr_slave_1 left promiscuous mode [ 73.521076][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.528624][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.538948][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.547147][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.555107][ T4240] device bridge_slave_1 left promiscuous mode [ 73.563907][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.583327][ T4240] device bridge_slave_0 left promiscuous mode [ 73.589564][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.634988][ T4240] device veth1_macvtap left promiscuous mode [ 73.650529][ T4240] device veth0_macvtap left promiscuous mode [ 73.656637][ T4240] device veth1_vlan left promiscuous mode [ 73.664891][ T4240] device veth0_vlan left promiscuous mode [ 73.755062][ T4659] loop4: detected capacity change from 0 to 32768 [ 73.907367][ T4659] XFS (loop4): Mounting V5 Filesystem [ 74.021997][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 74.039834][ T4659] XFS (loop4): Ending clean mount [ 74.077478][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 74.179168][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.192040][ T4172] XFS (loop4): Unmounting Filesystem [ 74.209141][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.387710][ T4240] bond0 (unregistering): Released all slaves [ 74.840472][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 74.851371][ T4687] loop2: detected capacity change from 0 to 1024 [ 75.001000][ T4678] hfsplus: b-tree write err: -5, ino 4 [ 75.079304][ T4696] loop4: detected capacity change from 0 to 512 [ 75.145404][ T4575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.165880][ T4696] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 75.203095][ T4696] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 75.221364][ T4696] EXT4-fs (loop4): group descriptors corrupted! [ 75.246029][ T4707] ubi0: attaching mtd0 [ 75.254866][ T4707] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 75.319903][ T4575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.354311][ T4575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.424587][ T4575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.630567][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 75.868916][ T4575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.941465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.950905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.976022][ T4575] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.995543][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 76.090301][ T4176] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.116944][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.139124][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.170912][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.178066][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.216832][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.248629][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.277873][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.285024][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.333126][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.340379][ T4176] usb 5-1: Using ep0 maxpacket: 32 [ 76.354219][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.384331][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.456625][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.476777][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.495647][ T4176] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.506914][ T4746] loop3: detected capacity change from 0 to 512 [ 76.524305][ T4176] usb 5-1: config 0 has no interface number 0 [ 76.531233][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.544835][ T4176] usb 5-1: config 0 interface 184 has no altsetting 0 [ 76.560901][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.585897][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.641740][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.679888][ T4575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.716738][ T4746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.750296][ T4746] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.761387][ T4176] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 76.773058][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.791887][ T4728] loop2: detected capacity change from 0 to 40427 [ 76.810825][ T4176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.818890][ T4176] usb 5-1: Product: syz [ 76.827430][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.841630][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.867360][ T4728] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 76.890233][ T4728] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.891790][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.914609][ T4176] usb 5-1: Manufacturer: syz [ 76.919225][ T4176] usb 5-1: SerialNumber: syz [ 76.949478][ T4176] usb 5-1: config 0 descriptor?? [ 76.976173][ T4728] F2FS-fs (loop2): invalid crc value [ 76.986477][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 77.032598][ T4176] smsc75xx v1.0.0 [ 77.044400][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 77.090226][ T4728] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.236962][ T4728] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 77.251756][ T4728] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 77.574727][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.599816][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.617549][ T4575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.160327][ T4176] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 78.205287][ T4176] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.207807][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.285933][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.374307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.412185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.455766][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 78.481104][ T4796] netlink: 'syz.3.161': attribute type 18 has an invalid length. [ 78.557552][ T4796] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.566785][ T4796] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.575717][ T4796] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.584553][ T4796] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.710354][ T4176] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 78.721460][ T4176] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 78.731366][ T4176] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 78.744134][ T4796] device vxlan0 entered promiscuous mode [ 78.751835][ T4176] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 78.777606][ T4575] device veth0_vlan entered promiscuous mode [ 78.787184][ T4176] usb 5-1: USB disconnect, device number 3 [ 78.804253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.848659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.928427][ T4575] device veth1_vlan entered promiscuous mode [ 79.024922][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.033131][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 79.040003][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.068920][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.092294][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.129306][ T4575] device veth0_macvtap entered promiscuous mode [ 79.184625][ T4575] device veth1_macvtap entered promiscuous mode [ 79.200292][ T2856] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.220820][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.232876][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.282209][ T4792] loop2: detected capacity change from 0 to 32768 [ 79.319697][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.355397][ T26] audit: type=1326 audit(1737572436.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4806 comm="syz.4.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f900712dd29 code=0x0 [ 79.362318][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.394544][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.412027][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.425418][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.444443][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.455675][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.470240][ T2856] usb 1-1: Using ep0 maxpacket: 16 [ 79.487810][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.508042][ T4575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.533803][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.540666][ T4792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.157 (4792) [ 79.549688][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.590970][ T2856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.609648][ T2856] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 79.619619][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.637483][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.639283][ T2856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.647847][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.647867][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.647877][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.647888][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.647898][ T4575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.647909][ T4575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.649875][ T4575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.691963][ T2856] usb 1-1: config 0 descriptor?? [ 79.772868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.789351][ T4819] loop3: detected capacity change from 0 to 8192 [ 79.799416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.811229][ T4792] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.832120][ T4575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.841143][ T4792] BTRFS info (device loop2): metadata ratio 2 [ 79.847399][ T4792] BTRFS info (device loop2): force zlib compression, level 3 [ 79.851493][ T4575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.861565][ T4792] BTRFS info (device loop2): use zlib compression, level 3 [ 79.872811][ T4792] BTRFS info (device loop2): enabling auto defrag [ 79.879373][ T4792] BTRFS info (device loop2): max_inline at 0 [ 79.886102][ T4792] BTRFS info (device loop2): using free space tree [ 79.893035][ T4792] BTRFS info (device loop2): has skinny extents [ 79.904675][ T4575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.919267][ T4575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.966874][ T4819] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 79.986121][ T4819] REISERFS (device loop3): using ordered data mode [ 79.995249][ T4819] reiserfs: using flush barriers [ 80.005692][ T4819] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.024961][ T4819] REISERFS (device loop3): checking transaction log (loop3) [ 80.035058][ T4792] BTRFS info (device loop2): enabling ssd optimizations [ 80.038146][ T4819] REISERFS (device loop3): Using r5 hash to sort names [ 80.053905][ T4819] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 80.187730][ T26] audit: type=1800 audit(1737572437.197:10): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.157" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 80.234758][ T2856] input: HID 041e:3100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0002/input/input7 [ 80.357955][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.384011][ T2856] creative-sb0540 0003:041E:3100.0002: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 80.417273][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.467894][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.528494][ T4678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.540338][ T4176] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.555609][ T4678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.578939][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.677168][ T2856] usb 1-1: USB disconnect, device number 4 [ 80.927170][ T4176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.941562][ T4176] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 80.967728][ T4176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.996698][ T4176] usb 5-1: config 0 descriptor?? [ 81.323273][ T4870] loop0: detected capacity change from 0 to 128 [ 81.516323][ T4176] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 81.532853][ T26] audit: type=1800 audit(1737572438.547:11): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="bus" dev="loop0" ino=1048604 res=0 errno=0 [ 81.785579][ T4283] usb 5-1: USB disconnect, device number 4 [ 81.920298][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.006750][ T4903] ipt_CLUSTERIP: Please specify destination IP [ 82.054424][ T4912] loop3: detected capacity change from 0 to 16 [ 82.105565][ T4912] erofs: (device loop3): mounted with root inode @ nid 36. [ 82.148927][ T4912] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.290396][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.331236][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.470550][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.482372][ T4922] block nbd4: shutting down sockets [ 82.486121][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.512319][ T23] usb 1-1: SerialNumber: syz [ 82.564599][ T4920] loop3: detected capacity change from 0 to 8192 [ 82.722209][ T4920] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 82.742807][ T4920] FAT-fs (loop3): Filesystem has been set read-only [ 82.825807][ T23] usb 1-1: 0:2 : does not exist [ 82.858217][ T23] usb 1-1: unit 5: unexpected type 0x0a [ 82.934848][ T1107] cfg80211: failed to load regulatory.db [ 82.963305][ T23] usb 1-1: USB disconnect, device number 5 [ 83.170354][ T2856] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.212704][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.420217][ T2856] usb 4-1: Using ep0 maxpacket: 32 [ 83.540545][ T2856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.730500][ T2856] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 83.761609][ T2856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.774380][ T2856] usb 4-1: Product: syz [ 83.784455][ T2856] usb 4-1: Manufacturer: syz [ 83.789073][ T2856] usb 4-1: SerialNumber: syz [ 83.810366][ T2856] usb 4-1: config 0 descriptor?? [ 83.864322][ T2856] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 83.989884][ T4958] loop2: detected capacity change from 0 to 4096 [ 84.109775][ T4958] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 84.197891][ T4956] loop0: detected capacity change from 0 to 40427 [ 84.249651][ T4956] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 84.267955][ T4956] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 84.341994][ T4171] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 84.349139][ T4171] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.358525][ T4171] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 84.368414][ T4956] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.494925][ T4956] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 84.512494][ T4956] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.628428][ T26] audit: type=1800 audit(1737572697.635:12): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.187" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 84.643202][ T4956] attempt to access beyond end of device [ 84.643202][ T4956] loop0: rw=2049, want=45112, limit=40427 [ 84.720949][ T4962] loop5: detected capacity change from 0 to 32768 [ 84.799157][ T4962] XFS (loop5): Mounting V5 Filesystem [ 84.891653][ T4962] XFS (loop5): Ending clean mount [ 84.937748][ T26] audit: type=1326 audit(1737572697.945:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 84.974819][ T4575] XFS (loop5): Unmounting Filesystem [ 85.000407][ T23] Bluetooth: hci5: command 0xfc11 tx timeout [ 85.006058][ T4181] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 85.043688][ T26] audit: type=1326 audit(1737572697.945:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 85.164839][ T26] audit: type=1326 audit(1737572697.945:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 85.275695][ T26] audit: type=1326 audit(1737572697.945:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 85.360616][ T26] audit: type=1326 audit(1737572697.955:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 85.383674][ T26] audit: type=1326 audit(1737572697.955:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 85.426735][ T26] audit: type=1326 audit(1737572697.955:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4961 comm="syz.5.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08c793d29 code=0x7ffc0000 [ 85.493397][ T4992] netlink: 'syz.5.193': attribute type 12 has an invalid length. [ 85.560626][ T2856] gspca_sunplus: reg_r err -71 [ 85.566782][ T2856] sunplus: probe of 4-1:0.0 failed with error -71 [ 85.598776][ T2856] usb 4-1: USB disconnect, device number 3 [ 85.626952][ T4998] loop5: detected capacity change from 0 to 512 [ 85.687388][ T4209] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.742759][ T4998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.759739][ T4998] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.832282][ T4998] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.200: corrupted inode contents [ 85.856153][ T4998] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #2: comm syz.5.200: mark_inode_dirty error [ 85.872275][ T4998] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.200: corrupted inode contents [ 85.915187][ T4998] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.200: mark_inode_dirty error [ 86.061969][ T4209] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 86.070451][ T4209] usb 1-1: config 8 has no interface number 0 [ 86.081271][ T4209] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 86.109933][ T4209] usb 1-1: config 8 interface 177 has no altsetting 0 [ 86.117445][ T5022] loop3: detected capacity change from 0 to 128 [ 86.119172][ T4209] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 86.143209][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.205942][ T5022] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 86.215917][ T4987] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 86.241548][ T5022] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 86.250784][ T5022] FAT-fs (loop3): Filesystem has been set read-only [ 86.383502][ T4170] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 86.470478][ T4209] usb 1-1: string descriptor 0 read error: -71 [ 86.510198][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 86.580440][ T4176] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.650333][ T2856] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 86.840445][ T4176] usb 3-1: Using ep0 maxpacket: 8 [ 87.000596][ T4209] ir_toy 1-1:8.177: could not write reset command: -110 [ 87.022552][ C0] ir_toy 1-1:8.177: failed to resubmit urb: -1 [ 87.032085][ T4209] ir_toy: probe of 1-1:8.177 failed with error -110 [ 87.049231][ T4209] usb 1-1: USB disconnect, device number 6 [ 87.050421][ T2856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 87.116528][ T2856] usb 6-1: not running at top speed; connect to a high speed hub [ 87.154278][ T4176] usb 3-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 87.170064][ T26] audit: type=1804 audit(1737572700.175:20): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.217" name="/newroot/40/bus/file0" dev="overlay" ino=237 res=1 errno=0 [ 87.174079][ T4176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.210519][ T2856] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 87.216000][ T4176] usb 3-1: Product: syz [ 87.221278][ T4207] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.230723][ T4176] usb 3-1: Manufacturer: syz [ 87.237152][ T4176] usb 3-1: SerialNumber: syz [ 87.241491][ T2856] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 87.285655][ T4176] usb 3-1: config 0 descriptor?? [ 87.300336][ T5052] loop0: detected capacity change from 0 to 512 [ 87.332248][ T4176] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 87.353358][ T4176] usb 3-1: Detected FT8U232AM [ 87.373250][ T4176] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.387396][ T5052] EXT4-fs (loop0): Ignoring removed bh option [ 87.408408][ T5052] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 87.410585][ T2856] usb 6-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 87.426065][ T5052] EXT4-fs (loop0): invalid journal inode [ 87.437411][ T5052] EXT4-fs (loop0): can't get journal size [ 87.454091][ T2856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.470404][ T2856] usb 6-1: Product: syz [ 87.479350][ T5052] EXT4-fs (loop0): 1 truncate cleaned up [ 87.479852][ T2856] usb 6-1: Manufacturer: syz [ 87.490600][ T4207] usb 4-1: Using ep0 maxpacket: 8 [ 87.497672][ T5052] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,bh,resuid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none. [ 87.504066][ T2856] usb 6-1: SerialNumber: syz [ 87.572798][ T26] audit: type=1800 audit(1737572700.585:21): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 87.610438][ T4207] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 87.637386][ T4207] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.671605][ T5055] EXT4-fs (loop0): resizing filesystem from 0 to 1 blocks [ 87.689621][ T4207] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.700552][ T5055] EXT4-fs warning (device loop0): ext4_resize_fs:2014: resize would cause inodes_count overflow [ 87.710658][ T4207] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.723695][ T4207] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.727051][ T4176] usb 3-1: USB disconnect, device number 2 [ 87.737592][ T4207] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.773326][ T4176] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 87.794149][ T4207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.799003][ T4176] ftdi_sio 3-1:0.0: device disconnected [ 87.804777][ T4179] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /41/file0: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1 [ 87.847736][ T4179] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 87.868910][ T4179] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 88.100326][ T4207] usb 4-1: usb_control_msg returned -32 [ 88.106164][ T4207] usbtmc 4-1:16.0: can't read capabilities [ 88.342156][ T4678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.438314][ T4678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.500679][ T4678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.618662][ T4678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.642525][ T5070] loop2: detected capacity change from 0 to 1764 [ 88.678528][ T2856] usb 6-1: USB disconnect, device number 2 [ 88.740780][ T5070] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 88.814899][ T5070] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.845786][ T5074] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 88.866766][ T5066] chnl_net:caif_netlink_parms(): no params data found [ 89.082502][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.092037][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.101860][ T5066] device bridge_slave_0 entered promiscuous mode [ 89.121249][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.133967][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.144710][ T5066] device bridge_slave_1 entered promiscuous mode [ 89.227191][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.277542][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.331923][ T5066] team0: Port device team_slave_0 added [ 89.357123][ T5066] team0: Port device team_slave_1 added [ 89.389259][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.397322][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.426291][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.439639][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.447308][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.491149][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.568105][ T5066] device hsr_slave_0 entered promiscuous mode [ 89.576627][ T5066] device hsr_slave_1 entered promiscuous mode [ 89.917752][ C0] sd 0:0:1:0: [sda] tag#6633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 89.928331][ C0] sd 0:0:1:0: [sda] tag#6633 CDB: opcode=0x71 (reserved) [ 89.933865][ T5066] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.935433][ C0] sd 0:0:1:0: [sda] tag#6633 CDB[00]: 71 38 e7 13 f5 a0 66 00 0d 26 dc bc de f9 0b 51 [ 89.951620][ C0] sd 0:0:1:0: [sda] tag#6633 CDB[10]: 70 26 c0 a1 29 e9 4e b2 af d4 e9 21 7c 58 d7 c1 [ 89.961233][ C0] sd 0:0:1:0: [sda] tag#6633 CDB[20]: fe [ 90.057011][ T5066] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.079423][ T5066] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.096330][ T4209] usb 4-1: USB disconnect, device number 4 [ 90.174265][ T5066] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.325319][ T5099] loop5: detected capacity change from 0 to 32768 [ 90.362916][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 90.377304][ T5128] netlink: 'syz.3.232': attribute type 14 has an invalid length. [ 90.432963][ T5099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.227 (5099) [ 90.475567][ T4678] device hsr_slave_0 left promiscuous mode [ 90.494779][ T4678] device hsr_slave_1 left promiscuous mode [ 90.497249][ T5099] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 90.518782][ T5099] BTRFS info (device loop5): using free space tree [ 90.524482][ T5132] loop4: detected capacity change from 0 to 64 [ 90.531156][ T5099] BTRFS info (device loop5): has skinny extents [ 90.549062][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.578146][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.587628][ T4678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.602039][ T4209] Bluetooth: hci4: command 0x0409 tx timeout [ 90.625052][ T5140] Failed to get privilege flags for destination (handle=0x0:0x0) [ 90.646582][ T4678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.698530][ T4678] device bridge_slave_1 left promiscuous mode [ 90.720414][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.786642][ T4678] device bridge_slave_0 left promiscuous mode [ 90.801672][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.808197][ T5099] BTRFS info (device loop5): enabling ssd optimizations [ 90.827241][ T4678] device veth1_macvtap left promiscuous mode [ 90.833998][ T4678] device veth0_macvtap left promiscuous mode [ 90.843062][ T4678] device veth1_vlan left promiscuous mode [ 90.849060][ T4678] device veth0_vlan left promiscuous mode [ 90.864972][ T5154] loop2: detected capacity change from 0 to 64 [ 90.943134][ T5099] fs-verity: sha512 using implementation "sha512-avx2" [ 91.028191][ T5099] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 91.105210][ T5154] hfs: request for non-existent node 1291 in B*Tree [ 91.166975][ T5154] hfs: request for non-existent node 1291 in B*Tree [ 91.269610][ T154] hfs: request for non-existent node 1291 in B*Tree [ 91.372246][ T154] hfs: request for non-existent node 1291 in B*Tree [ 91.628377][ T5165] loop3: detected capacity change from 0 to 4096 [ 91.827050][ T4678] team0 (unregistering): Port device team_slave_1 removed [ 91.844528][ T4678] team0 (unregistering): Port device team_slave_0 removed [ 91.857290][ T4678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.872043][ T4678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.949796][ T4678] bond0 (unregistering): Released all slaves [ 92.278080][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.332555][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.353361][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.400256][ T5066] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.457816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.481122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.509415][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.516599][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.554381][ T5195] loop2: detected capacity change from 0 to 512 [ 92.567035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.594333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.617752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.646338][ T5195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.647528][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.663337][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.690339][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 92.701922][ T5195] EXT4-fs (loop2): 1 truncate cleaned up [ 92.731862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.754465][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: none. [ 92.760167][ T5203] loop3: detected capacity change from 0 to 22 [ 92.785320][ T5195] syz.2.249 (pid 5195) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 92.797582][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.813706][ T5195] EXT4-fs (loop2): shut down requested (1) [ 92.841556][ T5195] fscrypt (loop2, inode 18): Error -5 getting encryption context [ 92.872919][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.905565][ T5203] romfs: Unknown parameter ':' [ 92.926655][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.968563][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.078543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.097870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.147811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.185406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.222101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.232836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.339395][ T5189] loop4: detected capacity change from 0 to 32768 [ 93.351291][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.380052][ T5189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.248 (5189) [ 93.509047][ T5189] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 93.560778][ T5189] BTRFS info (device loop4): setting nodatacow, compression disabled [ 93.568917][ T5189] BTRFS info (device loop4): enabling auto defrag [ 93.648368][ T5189] BTRFS info (device loop4): max_inline at 0 [ 93.680248][ T5189] BTRFS info (device loop4): using free space tree [ 93.686809][ T5189] BTRFS info (device loop4): has skinny extents [ 93.835425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.883606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.980182][ T5066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.998281][ T5215] loop2: detected capacity change from 0 to 512 [ 94.025945][ T5250] netlink: 104 bytes leftover after parsing attributes in process `syz.3.259'. [ 94.143502][ T5215] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.282914][ T5215] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_nolock,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 94.307145][ T5215] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.711127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.736575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.820705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.834929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.889027][ T5066] device veth0_vlan entered promiscuous mode [ 94.907609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.931753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.983982][ T5066] device veth1_vlan entered promiscuous mode [ 95.021283][ T5292] Bluetooth: hci4: command 0x040f tx timeout [ 95.109129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.131180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.209268][ T5066] device veth0_macvtap entered promiscuous mode [ 95.258822][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.287702][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.343090][ T5066] device veth1_macvtap entered promiscuous mode [ 95.351285][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.394936][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.464008][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.555994][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.596680][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.627937][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.635106][ T5320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 95.674937][ T5315] loop3: detected capacity change from 0 to 4096 [ 95.702021][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.718274][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.727336][ T5323] loop4: detected capacity change from 0 to 128 [ 95.730565][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.746080][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.764021][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.774084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.816275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.862207][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.880995][ T5315] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.935913][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.948493][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.966411][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.044946][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.090344][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.105877][ T5315] EXT4-fs (loop3): shut down requested (0) [ 96.122722][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.137771][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.194535][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.240278][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.259625][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.286535][ T5066] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.307585][ T5066] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.329803][ T5066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.359085][ T5066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.704712][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.726718][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.776523][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.809264][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.836809][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.883028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.084650][ T4212] Bluetooth: hci4: command 0x0419 tx timeout [ 97.258025][ T5382] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 97.280411][ T5350] loop2: detected capacity change from 0 to 32768 [ 97.289208][ T5382] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 97.356241][ T5389] loop4: detected capacity change from 0 to 512 [ 97.471304][ T5389] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 97.499594][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 97.516971][ T5398] loop3: detected capacity change from 0 to 512 [ 97.534221][ T5389] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.570836][ T5398] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 97.619981][ T5398] UDF-fs: Scanning with blocksize 512 failed [ 97.627435][ T26] audit: type=1800 audit(1737572710.635:22): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.277" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 97.711711][ T26] audit: type=1800 audit(1737572710.725:23): pid=5404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.277" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 97.748821][ T5398] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 97.761905][ T5407] loop5: detected capacity change from 0 to 8192 [ 97.786527][ T5398] UDF-fs: Scanning with blocksize 1024 failed [ 97.829236][ T5407] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 97.882008][ T5407] REISERFS (device loop5): using ordered data mode [ 97.888573][ T5407] reiserfs: using flush barriers [ 97.929583][ T5398] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 97.941043][ T5398] UDF-fs: Scanning with blocksize 2048 failed [ 97.947930][ T5398] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 97.973641][ T5407] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.995238][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.147076][ T5407] REISERFS (device loop5): checking transaction log (loop5) [ 98.202570][ T5407] REISERFS (device loop5): Using r5 hash to sort names [ 98.225975][ T5407] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 98.242047][ T5419] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 98.773889][ T5446] bridge0: port 3(syz_tun) entered blocking state [ 98.808109][ T5446] bridge0: port 3(syz_tun) entered disabled state [ 98.867592][ T5446] device syz_tun entered promiscuous mode [ 98.887040][ T5456] capability: warning: `syz.3.294' uses deprecated v2 capabilities in a way that may be insecure [ 98.921498][ T5446] bridge0: port 3(syz_tun) entered blocking state [ 98.928484][ T5446] bridge0: port 3(syz_tun) entered forwarding state [ 99.170547][ T4212] Bluetooth: hci4: command 0x0405 tx timeout [ 99.536159][ T5487] loop4: detected capacity change from 0 to 1764 [ 99.872410][ T5504] loop4: detected capacity change from 0 to 1024 [ 99.965789][ T5504] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,errors=continue,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,block_validity,init_itable,,errors=continue. Quota mode: writeback. [ 100.172584][ T5504] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.308: bg 0: bad block bitmap checksum [ 100.691299][ T5520] syz.3.309 uses obsolete (PF_INET,SOCK_PACKET) [ 100.712311][ T5504] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.308: iget: checksum invalid [ 100.906648][ T5489] loop6: detected capacity change from 0 to 40427 [ 100.913472][ T5493] loop5: detected capacity change from 0 to 40427 [ 100.997027][ T4172] bridge0: port 3(syz_tun) entered disabled state [ 101.010749][ T5493] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 101.040649][ T5493] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 101.056853][ T4172] device syz_tun left promiscuous mode [ 101.064474][ T5489] F2FS-fs (loop6): Found nat_bits in checkpoint [ 101.074213][ T4172] bridge0: port 3(syz_tun) entered disabled state [ 101.116867][ T5493] F2FS-fs (loop5): Found nat_bits in checkpoint [ 101.160347][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 101.282317][ T5489] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 101.395175][ T26] audit: type=1800 audit(1737572714.405:24): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.304" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 101.417552][ T5493] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 101.450185][ T5493] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 101.494294][ T5489] attempt to access beyond end of device [ 101.494294][ T5489] loop6: rw=2049, want=45104, limit=40427 [ 101.496899][ T5543] device syzkaller0 entered promiscuous mode [ 101.518800][ T5551] loop2: detected capacity change from 0 to 512 [ 101.556864][ T26] audit: type=1800 audit(1737572714.445:25): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.304" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 101.618428][ T26] audit: type=1800 audit(1737572714.605:26): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.306" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 101.669915][ T4575] attempt to access beyond end of device [ 101.669915][ T4575] loop5: rw=2049, want=45104, limit=40427 [ 101.761150][ T5066] attempt to access beyond end of device [ 101.761150][ T5066] loop6: rw=2049, want=45112, limit=40427 [ 101.782374][ T5551] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 101.800575][ T5551] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.870622][ T5551] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.314: corrupted inode contents [ 101.891879][ T5551] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.314: mark_inode_dirty error [ 101.903840][ T5551] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.314: corrupted inode contents [ 101.953099][ T5551] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.314: mark_inode_dirty error [ 102.041282][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.048728][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.628341][ T5582] netlink: 96 bytes leftover after parsing attributes in process `syz.6.318'. [ 102.738599][ T4290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.833661][ T4290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.057892][ T4290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.117925][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.324'. [ 103.133721][ T5598] netlink: 'syz.6.324': attribute type 1 has an invalid length. [ 103.150317][ T5598] netlink: 'syz.6.324': attribute type 1 has an invalid length. [ 103.242285][ T5607] loop2: detected capacity change from 0 to 128 [ 103.279368][ T4290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.326792][ T5609] loop6: detected capacity change from 0 to 256 [ 103.340612][ T5607] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.380386][ T5607] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.452328][ T5577] chnl_net:caif_netlink_parms(): no params data found [ 103.789424][ T5607] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 103.832020][ T5632] netlink: 'syz.3.331': attribute type 2 has an invalid length. [ 103.849506][ T5632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'. [ 103.955085][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.965939][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.029882][ T5577] device bridge_slave_0 entered promiscuous mode [ 104.116615][ T5653] input: syz1 as /devices/virtual/input/input10 [ 104.135894][ T5650] loop6: detected capacity change from 0 to 2048 [ 104.143142][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.166960][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.187296][ T5577] device bridge_slave_1 entered promiscuous mode [ 104.271175][ T5655] xt_hashlimit: max too large, truncated to 1048576 [ 104.279640][ T5650] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.304801][ T5662] loop2: detected capacity change from 0 to 512 [ 104.364348][ T5662] EXT4-fs (loop2): Ignoring removed orlov option [ 104.399066][ T5662] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.435768][ T5662] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.337: casefold flag without casefold feature [ 104.450952][ T4212] Bluetooth: hci3: command 0x0409 tx timeout [ 104.457476][ T5662] EXT4-fs (loop2): Remounting filesystem read-only [ 104.490523][ T5662] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.337: couldn't read orphan inode 15 (err -117) [ 104.514341][ T5666] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 49 (only 1 groups) [ 104.555624][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.571749][ T5662] EXT4-fs (loop2): Remounting filesystem read-only [ 104.578297][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback. [ 104.604098][ T5674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.644939][ T5066] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 104.662955][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.684663][ T5066] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz-executor: iget: bogus i_mode (70563) [ 104.754150][ T5066] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz-executor: iget: bogus i_mode (70563) [ 104.875468][ T5577] team0: Port device team_slave_0 added [ 105.020245][ T5577] team0: Port device team_slave_1 added [ 105.044206][ T5687] loop5: detected capacity change from 0 to 256 [ 105.128943][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.163105][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.246826][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.338847][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.369719][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.454416][ T5703] loop3: detected capacity change from 0 to 2048 [ 105.486240][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.586346][ T5703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.781811][ T5577] device hsr_slave_0 entered promiscuous mode [ 105.804291][ T5577] device hsr_slave_1 entered promiscuous mode [ 105.818698][ T5577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.826869][ T5577] Cannot create hsr debugfs directory [ 105.866224][ T5714] ODEBUG: Out of memory. ODEBUG disabled [ 106.060785][ T4890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.165264][ T4290] device hsr_slave_0 left promiscuous mode [ 106.180066][ T4290] device hsr_slave_1 left promiscuous mode [ 106.193714][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.209211][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.224061][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.239696][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.260605][ T4290] device bridge_slave_1 left promiscuous mode [ 106.281082][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.300271][ T4290] device bridge_slave_0 left promiscuous mode [ 106.306517][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.314435][ T4890] usb 3-1: Using ep0 maxpacket: 32 [ 106.345897][ T4290] device veth1_macvtap left promiscuous mode [ 106.354728][ T4290] device veth0_macvtap left promiscuous mode [ 106.371341][ T4290] device veth1_vlan left promiscuous mode [ 106.377246][ T4290] device veth0_vlan left promiscuous mode [ 106.406045][ T5718] loop3: detected capacity change from 0 to 32768 [ 106.450478][ T4890] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 106.459579][ T4890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.546365][ T4890] usb 3-1: config 0 descriptor?? [ 106.552709][ T5718] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 106.566062][ T4879] Bluetooth: hci3: command 0x041b tx timeout [ 106.603066][ T5718] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.604618][ T4890] gspca_main: sunplus-2.14.0 probing 041e:400b [ 106.749536][ T26] audit: type=1800 audit(1737572719.755:27): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.355" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 106.796742][ T5723] [ 106.799120][ T5723] ====================================================== [ 106.806138][ T5723] WARNING: possible circular locking dependency detected [ 106.813148][ T5723] 5.15.176-syzkaller #0 Not tainted [ 106.818335][ T5723] ------------------------------------------------------ [ 106.825344][ T5723] syz.3.355/5723 is trying to acquire lock: [ 106.831229][ T5723] ffff88805fc0bf60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 106.841859][ T5723] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.841859][ T5723] but task is already holding lock: [ 106.849215][ T5723] ffff88805fc0bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 106.859845][ T5723] [ 106.859845][ T5723] which lock already depends on the new lock. [ 106.859845][ T5723] [ 106.870244][ T5723] [ 106.870244][ T5723] the existing dependency chain (in reverse order) is: [ 106.879258][ T5723] [ 106.879258][ T5723] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 106.887088][ T5723] lock_acquire+0x1db/0x4f0 [ 106.892130][ T5723] down_read+0x45/0x2e0 [ 106.896818][ T5723] ocfs2_init_acl+0x398/0x930 [ 106.902027][ T5723] ocfs2_mknod+0x1e8f/0x2cd0 [ 106.907145][ T5723] ocfs2_create+0x194/0x430 [ 106.912187][ T5723] path_openat+0x130a/0x2f20 [ 106.917298][ T5723] do_filp_open+0x21c/0x460 [ 106.922315][ T5723] do_sys_openat2+0x13b/0x4f0 [ 106.927510][ T5723] __x64_sys_creat+0x11f/0x160 [ 106.932792][ T5723] do_syscall_64+0x3b/0xb0 [ 106.937748][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.944172][ T5723] [ 106.944172][ T5723] -> #3 (jbd2_handle){++++}-{0:0}: [ 106.951565][ T5723] lock_acquire+0x1db/0x4f0 [ 106.956596][ T5723] start_this_handle+0x12e1/0x1570 [ 106.962238][ T5723] jbd2__journal_start+0x2d1/0x5c0 [ 106.967877][ T5723] jbd2_journal_start+0x25/0x30 [ 106.973244][ T5723] ocfs2_start_trans+0x3c2/0x6f0 [ 106.978704][ T5723] ocfs2_mknod+0x15bb/0x2cd0 [ 106.983804][ T5723] ocfs2_create+0x194/0x430 [ 106.988825][ T5723] path_openat+0x130a/0x2f20 [ 106.993933][ T5723] do_filp_open+0x21c/0x460 [ 106.998952][ T5723] do_sys_openat2+0x13b/0x4f0 [ 107.004154][ T5723] __x64_sys_creat+0x11f/0x160 [ 107.009451][ T5723] do_syscall_64+0x3b/0xb0 [ 107.014389][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.020819][ T5723] [ 107.020819][ T5723] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 107.029338][ T5723] lock_acquire+0x1db/0x4f0 [ 107.034362][ T5723] down_read+0x45/0x2e0 [ 107.039044][ T5723] ocfs2_start_trans+0x3b7/0x6f0 [ 107.044490][ T5723] ocfs2_mknod+0x15bb/0x2cd0 [ 107.049605][ T5723] ocfs2_create+0x194/0x430 [ 107.054609][ T5723] path_openat+0x130a/0x2f20 [ 107.059694][ T5723] do_filp_open+0x21c/0x460 [ 107.064691][ T5723] do_sys_openat2+0x13b/0x4f0 [ 107.069863][ T5723] __x64_sys_creat+0x11f/0x160 [ 107.075121][ T5723] do_syscall_64+0x3b/0xb0 [ 107.080044][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.086435][ T5723] [ 107.086435][ T5723] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 107.093888][ T5723] lock_acquire+0x1db/0x4f0 [ 107.098895][ T5723] ocfs2_start_trans+0x2b2/0x6f0 [ 107.104329][ T5723] ocfs2_truncate_file+0x661/0x14f0 [ 107.110024][ T5723] ocfs2_setattr+0x16dd/0x1ce0 [ 107.115302][ T5723] notify_change+0xc6d/0xf50 [ 107.120388][ T5723] do_truncate+0x21c/0x300 [ 107.125301][ T5723] path_openat+0x28a3/0x2f20 [ 107.130467][ T5723] do_filp_open+0x21c/0x460 [ 107.135481][ T5723] do_sys_openat2+0x13b/0x4f0 [ 107.140654][ T5723] __x64_sys_open+0x221/0x270 [ 107.145851][ T5723] do_syscall_64+0x3b/0xb0 [ 107.150774][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.157191][ T5723] [ 107.157191][ T5723] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 107.164985][ T5723] validate_chain+0x1649/0x5930 [ 107.170353][ T5723] __lock_acquire+0x1295/0x1ff0 [ 107.175712][ T5723] lock_acquire+0x1db/0x4f0 [ 107.180734][ T5723] down_write+0x38/0x60 [ 107.185396][ T5723] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 107.191886][ T5723] ocfs2_truncate_file+0xe3c/0x14f0 [ 107.197607][ T5723] ocfs2_setattr+0x16dd/0x1ce0 [ 107.202868][ T5723] notify_change+0xc6d/0xf50 [ 107.207965][ T5723] do_truncate+0x21c/0x300 [ 107.212893][ T5723] path_openat+0x28a3/0x2f20 [ 107.218006][ T5723] do_filp_open+0x21c/0x460 [ 107.223012][ T5723] do_sys_openat2+0x13b/0x4f0 [ 107.228197][ T5723] __x64_sys_open+0x221/0x270 [ 107.233381][ T5723] do_syscall_64+0x3b/0xb0 [ 107.238296][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.244698][ T5723] [ 107.244698][ T5723] other info that might help us debug this: [ 107.244698][ T5723] [ 107.254922][ T5723] Chain exists of: [ 107.254922][ T5723] &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem [ 107.254922][ T5723] [ 107.267940][ T5723] Possible unsafe locking scenario: [ 107.267940][ T5723] [ 107.275381][ T5723] CPU0 CPU1 [ 107.280717][ T5723] ---- ---- [ 107.286072][ T5723] lock(&oi->ip_xattr_sem); [ 107.290642][ T5723] lock(jbd2_handle); [ 107.297225][ T5723] lock(&oi->ip_xattr_sem); [ 107.304312][ T5723] lock(&oi->ip_alloc_sem); [ 107.308874][ T5723] [ 107.308874][ T5723] *** DEADLOCK *** [ 107.308874][ T5723] [ 107.316994][ T5723] 3 locks held by syz.3.355/5723: [ 107.322016][ T5723] #0: ffff88807e8c8460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 107.331237][ T5723] #1: ffff88805fc0c2c8 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 107.341558][ T5723] #2: ffff88805fc0bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 107.352579][ T5723] [ 107.352579][ T5723] stack backtrace: [ 107.358443][ T5723] CPU: 1 PID: 5723 Comm: syz.3.355 Not tainted 5.15.176-syzkaller #0 [ 107.366480][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.376515][ T5723] Call Trace: [ 107.379785][ T5723] [ 107.382698][ T5723] dump_stack_lvl+0x1e3/0x2d0 [ 107.387364][ T5723] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 107.392983][ T5723] ? print_circular_bug+0x12b/0x1a0 [ 107.398168][ T5723] check_noncircular+0x2f8/0x3b0 [ 107.403083][ T5723] ? add_chain_block+0x850/0x850 [ 107.407993][ T5723] ? lockdep_lock+0x11f/0x2a0 [ 107.412645][ T5723] validate_chain+0x1649/0x5930 [ 107.417486][ T5723] ? stack_trace_save+0x113/0x1c0 [ 107.422495][ T5723] ? reacquire_held_locks+0x660/0x660 [ 107.427848][ T5723] ? stack_trace_snprint+0xe0/0xe0 [ 107.432935][ T5723] ? lockdep_unlock+0x166/0x300 [ 107.437762][ T5723] ? mark_lock+0x98/0x340 [ 107.442072][ T5723] __lock_acquire+0x1295/0x1ff0 [ 107.446936][ T5723] lock_acquire+0x1db/0x4f0 [ 107.451417][ T5723] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 107.457551][ T5723] ? read_lock_is_recursive+0x10/0x10 [ 107.462896][ T5723] ? __might_sleep+0xc0/0xc0 [ 107.467464][ T5723] ? rwsem_write_trylock+0x166/0x210 [ 107.472730][ T5723] ? clear_nonspinnable+0x60/0x60 [ 107.477735][ T5723] down_write+0x38/0x60 [ 107.481868][ T5723] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 107.487995][ T5723] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 107.493954][ T5723] ? ocfs2_remove_refcount_tree+0x1000/0x1000 [ 107.500015][ T5723] ? ocfs2_truncate_file+0xa07/0x14f0 [ 107.505363][ T5723] ocfs2_truncate_file+0xe3c/0x14f0 [ 107.510539][ T5723] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 107.516236][ T5723] ? ocfs2_simple_size_update+0x4d0/0x4d0 [ 107.521939][ T5723] ? do_raw_spin_unlock+0x137/0x8b0 [ 107.527116][ T5723] ? memset+0x1f/0x40 [ 107.531076][ T5723] ? _raw_spin_unlock+0x24/0x40 [ 107.535905][ T5723] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 107.541607][ T5723] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 107.547159][ T5723] ? ocfs2_rw_lock+0x13a/0x250 [ 107.551898][ T5723] ? ocfs2_create_new_inode_locks+0x6d0/0x6d0 [ 107.557940][ T5723] ? jbd2_journal_begin_ordered_truncate+0xbc/0x150 [ 107.564503][ T5723] ocfs2_setattr+0x16dd/0x1ce0 [ 107.569248][ T5723] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 107.575031][ T5723] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 107.581256][ T5723] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 107.587130][ T5723] ? current_time+0x1ba/0x300 [ 107.591792][ T5723] ? atime_needs_update+0x7b0/0x7b0 [ 107.596986][ T5723] ? evm_inode_setattr+0xf7/0x5b0 [ 107.601993][ T5723] ? rwsem_write_trylock+0x166/0x210 [ 107.607254][ T5723] ? bpf_lsm_inode_setattr+0x5/0x10 [ 107.612430][ T5723] ? security_inode_setattr+0xce/0x120 [ 107.617876][ T5723] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 107.623686][ T5723] notify_change+0xc6d/0xf50 [ 107.628301][ T5723] do_truncate+0x21c/0x300 [ 107.632695][ T5723] ? rcu_lock_release+0x20/0x20 [ 107.637527][ T5723] ? ima_bprm_check+0x2b0/0x2b0 [ 107.642361][ T5723] ? bpf_lsm_path_truncate+0x5/0x10 [ 107.647549][ T5723] path_openat+0x28a3/0x2f20 [ 107.652126][ T5723] ? do_filp_open+0x460/0x460 [ 107.656808][ T5723] do_filp_open+0x21c/0x460 [ 107.661304][ T5723] ? vfs_tmpfile+0x2e0/0x2e0 [ 107.665889][ T5723] ? _raw_spin_unlock+0x24/0x40 [ 107.670715][ T5723] ? alloc_fd+0x598/0x630 [ 107.675039][ T5723] do_sys_openat2+0x13b/0x4f0 [ 107.679706][ T5723] ? do_sys_open+0x220/0x220 [ 107.684284][ T5723] ? rcu_is_watching+0x11/0xa0 [ 107.689036][ T5723] ? __se_sys_mount+0x378/0x3c0 [ 107.693884][ T5723] __x64_sys_open+0x221/0x270 [ 107.698548][ T5723] ? do_sys_openat2+0x4f0/0x4f0 [ 107.703374][ T5723] ? syscall_enter_from_user_mode+0x2e/0x240 [ 107.709346][ T5723] ? lockdep_hardirqs_on+0x94/0x130 [ 107.714534][ T5723] ? syscall_enter_from_user_mode+0x2e/0x240 [ 107.720495][ T5723] do_syscall_64+0x3b/0xb0 [ 107.724909][ T5723] ? clear_bhb_loop+0x15/0x70 [ 107.729566][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.735436][ T5723] RIP: 0033:0x7f6bbe3a9d29 [ 107.739831][ T5723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.759432][ T5723] RSP: 002b:00007f6bbc1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 107.767849][ T5723] RAX: ffffffffffffffda RBX: 00007f6bbe59a080 RCX: 00007f6bbe3a9d29 [ 107.775797][ T5723] RDX: 0000000000000100 RSI: 0000000000044240 RDI: 00000000200005c0 [ 107.783920][ T5723] RBP: 00007f6bbe425b08 R08: 0000000000000000 R09: 0000000000000000 [ 107.791888][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.800036][ T5723] R13: 0000000000000000 R14: 00007f6bbe59a080 R15: 00007ffcaacc6ea8 [ 107.807987][ T5723] [ 107.820239][ T26] audit: type=1804 audit(1737572720.825:28): pid=5718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.355" name="/newroot/89/file1/bus" dev="loop3" ino=17058 res=1 errno=0 [ 107.881226][ T4890] gspca_sunplus: reg_w_riv err -110 [ 107.887679][ T4890] sunplus: probe of 3-1:0.0 failed with error -110 [ 107.963442][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.992990][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.037327][ T4290] bond0 (unregistering): Released all slaves [ 108.121684][ T7] usb 3-1: USB disconnect, device number 3 [ 108.145198][ T4877] Bluetooth: hci4: command 0x0409 tx timeout [ 108.407621][ T5718] ocfs2: Unmounting device (7,3) on (node local) [ 108.877627][ T5714] Set syz1 is full, maxelem 65536 reached [ 109.136734][ T4290] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.203460][ T4290] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.246130][ T4290] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.305536][ T4290] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.012206][ T4290] device hsr_slave_0 left promiscuous mode [ 110.018628][ T4290] device hsr_slave_1 left promiscuous mode [ 110.026769][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.035108][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.043009][ T4290] device bridge_slave_1 left promiscuous mode [ 110.049158][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.061085][ T4290] device bridge_slave_0 left promiscuous mode [ 110.067264][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.084735][ T4290] device hsr_slave_0 left promiscuous mode [ 110.092548][ T4290] device hsr_slave_1 left promiscuous mode [ 110.098818][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.108210][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.117929][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.126363][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.135670][ T4290] device bridge_slave_1 left promiscuous mode [ 110.142082][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.152177][ T4290] device bridge_slave_0 left promiscuous mode [ 110.158340][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.171897][ T4290] device veth1_macvtap left promiscuous mode [ 110.177918][ T4290] device veth0_macvtap left promiscuous mode [ 110.184539][ T4290] device veth1_vlan left promiscuous mode [ 110.190456][ T4290] device veth0_vlan left promiscuous mode [ 110.255877][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 110.266605][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 110.277983][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.289595][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.326551][ T4290] bond0 (unregistering): Released all slaves [ 110.392734][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 110.404077][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 110.415114][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.426340][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.466166][ T4290] bond0 (unregistering): Released all slaves [ 111.376581][ T4290] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.434921][ T4290] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.486111][ T4290] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.533616][ T4290] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.180683][ T4290] device hsr_slave_0 left promiscuous mode [ 112.186983][ T4290] device hsr_slave_1 left promiscuous mode [ 112.193551][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.201473][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.209152][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.218554][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.226931][ T4290] device bridge_slave_1 left promiscuous mode [ 112.233448][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.241941][ T4290] device bridge_slave_0 left promiscuous mode [ 112.248126][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.260282][ T4290] device veth1_macvtap left promiscuous mode [ 112.266312][ T4290] device veth0_macvtap left promiscuous mode [ 112.272733][ T4290] device veth1_vlan left promiscuous mode [ 112.278507][ T4290] device veth0_vlan left promiscuous mode [ 112.373744][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 112.384422][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 112.393999][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.405036][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.445081][ T4290] bond0 (unregistering): Released all slaves