last executing test programs: 3.281624192s ago: executing program 4 (id=3575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 2.378294746s ago: executing program 4 (id=3580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 2.230679397s ago: executing program 4 (id=3585): socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007"], 0xd) 2.061345621s ago: executing program 4 (id=3591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.914703614s ago: executing program 4 (id=3594): r0 = epoll_create1(0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000002}) read$hidraw(r1, &(0x7f0000000080)=""/174, 0xae) epoll_pwait(r0, &(0x7f0000000980)=[{}], 0x1, 0x0, 0x0, 0x0) 1.781189004s ago: executing program 4 (id=3597): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) socket$kcm(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9}}}}, 0x10) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x1dc, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x45, 0x4, 0x3, 0x1d, 0x1ce, 0x64, 0x0, 0x77, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x13, 0xc5, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @lsrr={0x83, 0x1b, 0xe5, [@loopback, @local, @empty, @remote, @remote, @empty]}, @timestamp_addr={0x44, 0x4, 0x94, 0x1, 0x7}, @timestamp_addr={0x44, 0x4c, 0x7c, 0x1, 0xb, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@multicast2}, {@loopback, 0x2}, {@loopback, 0x1}, {@local, 0x5}, {@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc28b}, {@broadcast, 0x7fff}]}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x8, "ef5e9a8b6d65"}, {0x0, 0x2}, {0x7, 0x5, "e4150a"}, {0x6, 0x8, "ff1bddf95a00"}]}, @ssrr={0x89, 0xb, 0xed, [@private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x44, 0x57, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@multicast2, 0x10000}, {@multicast1, 0x1}, {@multicast1, 0x7}, {@empty, 0x10000}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@multicast2, 0x9}]}, @noop, @timestamp_addr={0x44, 0x14, 0xdd, 0x1, 0x8, [{@multicast1, 0x81}, {@multicast1, 0x7ff}]}, @noop]}}, {0x13, 0x1, 0x0, @local, "19fe727f03933366b4740c105b727a75c3ce3550fe5642346de6141ae511b0bef4899295de968cf6c0a69eb669730e37d2fdfeb71454e34c3397b6c7d0f84fd5e18ad825c0c5db88e0e8e6e631498c1c951745811f06ded936ed243eb8c48f48a080f0ef71406e0c8097d9cf3f7d0fbecbaf868d2bbc598c671a722377effbf118190c552959301dd21f06bb1456d440f1306365e3fd28b63db4c483bddcae6d16b349baccdc633d9ecf0b5fba675284cdb3"}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@llc={0x1a, 0x6, 0x7, 0x0, 0x9, 0xe7, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x80) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_usb_connect(0x0, 0x3e, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x5a, 0x99, 0xe6, 0x20, 0x13d3, 0x3393, 0x6bed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x6d, [{{0x9, 0x4, 0xce, 0x7, 0x0, 0xef, 0x5a, 0x1d}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x8f, 0x47, 0xe1, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "9a00920360c8"}]}}]}}]}}]}}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000000000000003f00000000000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0) 1.494539618s ago: executing program 3 (id=3601): socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007"], 0xd) 1.404645395s ago: executing program 3 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.247718348s ago: executing program 2 (id=3606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.245071388s ago: executing program 3 (id=3607): r0 = epoll_create1(0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000002}) read$hidraw(r1, &(0x7f0000000080)=""/174, 0xae) epoll_pwait(r0, &(0x7f0000000980)=[{}], 0x1, 0x0, 0x0, 0x0) 1.180084163s ago: executing program 2 (id=3609): r0 = socket(0x2, 0x2, 0x1) sendto$packet(r0, &(0x7f0000000080)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.159870675s ago: executing program 2 (id=3610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x146fb1f23d1ce1fd, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 1.136200867s ago: executing program 3 (id=3612): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 1.070837573s ago: executing program 2 (id=3614): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents64(r0, &(0x7f0000000040)=""/44, 0x2c) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) getdents64(r2, &(0x7f0000000100)=""/116, 0x74) 1.019293006s ago: executing program 2 (id=3616): mlockall(0x3) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delsa={0x58, 0x11, 0x0, 0x0, 0x0, {@in=@empty}, [@lifetime_val={0x24}, @lastused={0xc}]}, 0x58}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc018aa06, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) 484.81626ms ago: executing program 1 (id=3634): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='-0', 0xfdef}]) 434.641735ms ago: executing program 0 (id=3635): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) finit_module(r2, &(0x7f0000000640)='\x00', 0x3) close_range(r2, 0xffffffffffffffff, 0x0) 362.70008ms ago: executing program 1 (id=3636): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x94}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000002"], 0x30}}], 0x1, 0x0) 347.961142ms ago: executing program 0 (id=3637): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@uid_forget}, {@noadinicb}, {@unhide}, {@longad}, {@undelete}, {@unhide}, {@unhide}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x13, 0xa}]}}}}}}}}, 0x0) 311.756004ms ago: executing program 1 (id=3638): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents64(r0, &(0x7f0000000040)=""/44, 0x2c) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) getdents64(r2, &(0x7f0000000100)=""/116, 0x74) 257.220389ms ago: executing program 0 (id=3639): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618999c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 224.816152ms ago: executing program 1 (id=3640): unshare(0x400) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 202.640884ms ago: executing program 0 (id=3641): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$ptp(r0, &(0x7f0000000040)=""/4090, 0xffa) 173.371666ms ago: executing program 1 (id=3642): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 166.328926ms ago: executing program 3 (id=3643): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) setgroups(0x1, &(0x7f0000000140)=[0x0]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) write$tcp_congestion(r3, 0x0, 0xee0000) 94.038082ms ago: executing program 0 (id=3644): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$NBD_SET_SOCK(r0, 0x8b00, 0xffffffffffffffff) 93.176972ms ago: executing program 3 (id=3645): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$eJzs3U1sHGf9B/DvrDdrO/+/UrdN2oKQGjUigkYkdpaSIEAEhFAOFYrEpRcOVuI0VjZp5bjIrRB1eb1y7KGHIhQOPaEekIo4VJQzEhInLrlH4u4Ti2Z2dr3Oxo43b7uBz0eanWfmeZnf/PzM7JusDfA/6/xrObCZIudPvLpRbt+62e7cutm+1i8nmU3SSJq9VYrrSfFZci69JZ8rd9bDFbsd55Xbn3xw/P2P2r2tZr1U7Rt79Rtx15ab9ZKjSWbq9QPYMd7FBx6vGMRdJuxYP3Ewad0Rm+N03/91C0ytove8OWIhOZhkrn4dkPru0Hi80T18Y93lAAAA4An11Fa2spFDk44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAniT17/8X9dLol4+m6P/+f6va16qatyYd74P6dNIBAAAAAAAAAMBD8OJWtrKRQ/3tblF95/9StXG4evy/vJUbWclaTmYjy1nPetaylGShqn+vemxtLK+vry3t1rPb7b7bnal6nh70zFDP0yOhFXtH3p194JMHAAAAAAAAgCfMHl+W/yznt7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaVAkM71VtRzulxfSaCaZS9Iq220mf+6Xn2SfTjoAAAAAeAye2spWNnKo+Hdvu1tU7/mfq973z+WtXM96VrOeTlZyqfosoPeuv/H3zXbn1s32tXIZHfc7/xorjGrE9D57uPuRF6sWR+r2m0m+nx/mRI7mQtaymh9nOetZydF8ryotp8hCNdY/v5XUcY7EO1s+nNsRyoV7xfpCFcl8Lme1iu1kLg4+Bmn02wwd7Y+tZEeGGnmvzE7x7do+c3SpXpd/g9/U6+mwUJ3UgUFGFuvcl9l4+tZuua/05sns+Edq1nsag8+gDu91pPvM+cF6Xeb6V8M5f3G/ET8qwzkvozqdxmD2Pbd3zpMv/+MvF650rl+9cvnGiemZRrvqdrvv7l575+xrDzIxl+f3n4nNXTLx8c7Nmbu1mRvzhB6RVp2NXozbd8vk/PDdsttNRu6WL1V9D2U1P8gbuZSVnMlilnI2i/l6Tqe9Y4Yd2Tuv1bXWGO9aO/alujCf5Nf1ejqUeX16KK/Dd7qFqm54z3aWntlHlsa8IzU/XxfKY/x86Bln8u7MxNJQJp7dOxO/LWdkbnSuX127svzmPo93vF6Xl+0vdz4f/u5hnM/9K+fLM+Ufq9raOTvKumfvWrdU1R0e1DVG6o4M6u51pbbq13CjI/Xqnr9rXbuqe2GobsernLyRzuBVCADToju66+DLB1vzt+f/Nv/h/C/mr8y/Ovfd2bOzX2jlwF+bf5r5Q+P3jW8WL+fD/DSHJhEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8t7nx9jtXlzudlbUpLKQxXq/yfCYd89QWZpOM26toPtwwPk5y3937vxXY3/PFzkr+f49ezaEZvt1rKv4WD174xo/qZNyjcXO8y3y+HnB6flwMeHROrV9789SNt9/5yuq15ddXXl+5fvrsmbNn2l9b+uqpy6udlcXe46SjBB6F7Wf/SUcCAAAAAAAAAAAA7Nfj+I+FSZ8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GQ7/1oObKbI0uLJxXL71s12p1z65e2WzSSNJMVPkuKz5Fx6SxaGhit2O84rtz/54Pj7H7W3x2r22zf26rc/m/WSo0lm6vWdDUbN7mu8i8PjNe4nvGJwhmXCjvUTB5P2nwAAAP//euIAEg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, 'memory.events\x00'}, {0x20, 'memory.eN\xdb\xf9\xe55\xc5'}, {0x20, 'tracefs\x00'}, {0x20, 'tracefs\x00'}], 0xa, "50c5856a6b1deee340eb4e1de3460e4ef9967deb3271ad9c8d8856c885eac76b859de813ab957c5d91f166f695cc6970d1b2c6f201f4b2ae99c7b4ca2cb8f1018fbe7a4c3a16a22043451a603a"}, 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 90.398023ms ago: executing program 1 (id=3646): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='-0', 0xfdef}]) 30.737218ms ago: executing program 0 (id=3647): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) finit_module(r2, &(0x7f0000000640)='\x00', 0x3) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3648): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x94}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000002"], 0x30}}], 0x1, 0x0) kernel console output (not intermixed with test programs): fully working HSR network [ 172.426187][ T7819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.432443][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.436103][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.445066][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.456378][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.463988][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.469957][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.472380][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 172.518064][ T8208] device syz_tun entered promiscuous mode [ 172.565484][ T8208] device batadv_slave_1 entered promiscuous mode [ 172.604872][ T8208] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 172.607107][ T8208] Cannot create hsr debugfs directory [ 172.890307][ T8225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1390'. [ 172.949657][ T8228] netlink: 'syz.0.1391': attribute type 13 has an invalid length. [ 173.134462][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.137382][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.254758][ T8240] mmap: syz.0.1394 (8240) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.529593][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.027112][ T8244] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1396'. [ 174.228253][ T8257] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1402'. [ 174.379167][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 174.420173][ T8246] device syz_tun entered promiscuous mode [ 174.455432][ T8246] device batadv_slave_1 entered promiscuous mode [ 174.495801][ T8246] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 174.497795][ T8246] Cannot create hsr debugfs directory [ 174.499208][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.502716][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.520509][ T7819] device veth0_vlan entered promiscuous mode [ 174.523102][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.526123][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.582734][ T7819] device veth1_vlan entered promiscuous mode [ 174.603123][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.606048][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.609121][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.624574][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.627557][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.630342][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.953422][ T7819] device veth0_macvtap entered promiscuous mode [ 174.961905][ T8271] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1407'. [ 174.995404][ T8277] netlink: 'syz.3.1410': attribute type 3 has an invalid length. [ 175.045600][ T8280] loop4: detected capacity change from 0 to 512 [ 175.051910][ T7819] device veth1_macvtap entered promiscuous mode [ 175.062245][ T8280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.072653][ T4568] device hsr_slave_0 left promiscuous mode [ 175.084976][ T8280] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 175.090437][ T8280] EXT4-fs (loop4): 1 truncate cleaned up [ 175.092038][ T8280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.106788][ T4568] device hsr_slave_1 left promiscuous mode [ 175.108460][ T8285] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1413'. [ 175.154359][ T7638] EXT4-fs (loop4): unmounting filesystem. [ 175.197353][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.199492][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.210386][ T4568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.212401][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.223470][ T4568] device bridge_slave_1 left promiscuous mode [ 175.229334][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.276446][ T4568] device bridge_slave_0 left promiscuous mode [ 175.278350][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.442417][ T8302] netlink: 'syz.2.1421': attribute type 3 has an invalid length. [ 175.460429][ T4568] device veth1_macvtap left promiscuous mode [ 175.462015][ T4568] device veth0_macvtap left promiscuous mode [ 175.463609][ T4568] device veth1_vlan left promiscuous mode [ 175.469235][ T4568] device veth0_vlan left promiscuous mode [ 177.470158][ T4568] team0 (unregistering): Port device team_slave_1 removed [ 177.658817][ T4568] team0 (unregistering): Port device team_slave_0 removed [ 177.865469][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.116050][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.671187][ T4568] bond0 (unregistering): Released all slaves [ 180.894899][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.897432][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.899944][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.902414][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.905044][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.907625][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.910098][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.912572][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.915468][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.917911][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.921612][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.930915][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.933911][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.937283][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.939988][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.942514][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.953592][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.957445][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.960296][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.962761][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.973223][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.978763][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.980770][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 180.986746][ T8300] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1420'. [ 181.011374][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.014061][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.017143][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.019844][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.022364][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.038093][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.046334][ T7819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.048491][ T7819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.050956][ T7819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.053273][ T7819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.843400][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.847921][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.865238][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.875834][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.882423][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.902704][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.979840][ T8332] netlink: 'syz.2.1431': attribute type 3 has an invalid length. [ 182.120750][ T8351] syz.3.1438 sent an empty control message without MSG_MORE. [ 183.406461][ T8403] input: syz1 as /devices/virtual/input/input7 [ 183.495187][ T8403] loop4: detected capacity change from 0 to 4096 [ 183.497463][ T8403] UDF-fs: bad mount option ">6&$Jp8c֭`S{ [ 183.497463][ T8403] Bfom0_LfEU3@X{[" or missing value [ 184.259201][ T8329] udevd[8329]: setting owner of /dev/input/event2 to uid=0, gid=103 failed: No such file or directory [ 184.629277][ T4235] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 185.542539][ T8463] input: syz1 as /devices/virtual/input/input8 [ 186.801282][ T4235] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 186.809286][ T8509] input: syz1 as /devices/virtual/input/input9 [ 186.858641][ T8509] loop3: detected capacity change from 0 to 4096 [ 186.865770][ T8509] UDF-fs: bad mount option ">6&$Jp8c֭`S{ [ 186.865770][ T8509] Bfom0_LfEU3@X{[" or missing value [ 186.937581][ T8515] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1510'. [ 186.948905][ T8515] Zero length message leads to an empty skb [ 187.119907][ T8528] dccp_v6_rcv: dropped packet with invalid checksum [ 187.440730][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.446652][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.129202][ T8545] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1523'. [ 188.194621][ T8549] input: syz1 as /devices/virtual/input/input10 [ 188.273389][ T8557] dccp_v6_rcv: dropped packet with invalid checksum [ 188.310960][ T8549] loop4: detected capacity change from 0 to 4096 [ 188.313190][ T8549] UDF-fs: bad mount option ">6&$Jp8c֭`S{ [ 188.313190][ T8549] Bfom0_LfEU3@X{[" or missing value [ 188.549910][ T4235] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 188.644501][ T8579] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1539'. [ 188.725223][ T8586] dccp_v6_rcv: dropped packet with invalid checksum [ 188.863885][ T8595] loop4: detected capacity change from 0 to 512 [ 188.886761][ T8595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.917561][ T8595] EXT4-fs (loop4): 1 truncate cleaned up [ 188.919614][ T8595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 189.018416][ T8603] input: syz1 as /devices/virtual/input/input11 [ 189.063375][ T7638] EXT4-fs (loop4): unmounting filesystem. [ 189.291051][ T8615] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1556'. [ 189.331729][ T8620] dccp_v6_rcv: dropped packet with invalid checksum [ 189.631289][ T8649] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1571'. [ 189.659010][ T8651] dccp_v6_rcv: dropped packet with invalid checksum [ 189.745111][ T4235] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 190.009942][ T8684] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 190.013788][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'. [ 190.414174][ T8710] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 190.424870][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1598'. [ 190.589366][ T8722] loop4: detected capacity change from 0 to 16 [ 190.592263][ T8722] erofs: (device loop4): mounted with root inode @ nid 36. [ 190.793766][ T8739] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 190.799773][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 190.812580][ T8737] input: syz1 as /devices/virtual/input/input12 [ 190.973772][ T4235] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 191.172676][ T8771] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 191.174843][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1625'. [ 191.241222][ T8778] input: syz1 as /devices/virtual/input/input13 [ 191.322797][ T8784] loop4: detected capacity change from 0 to 16 [ 191.351625][ T8784] erofs: (device loop4): mounted with root inode @ nid 36. [ 191.631343][ T8804] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 191.633582][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 191.694444][ T8809] input: syz1 as /devices/virtual/input/input14 [ 192.129435][ T8841] input: syz1 as /devices/virtual/input/input15 [ 192.250734][ T4235] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 192.301766][ T8857] loop4: detected capacity change from 0 to 256 [ 192.428428][ T8862] tipc: Enabling of bearer rejected, failed to enable media [ 192.764283][ T8880] input: syz1 as /devices/virtual/input/input16 [ 193.001435][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 193.220592][ T8905] tipc: Enabling of bearer rejected, failed to enable media [ 193.542191][ T4235] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 193.542695][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 193.667260][ T8932] tipc: Enabling of bearer rejected, failed to enable media [ 194.087208][ T27] audit: type=1326 audit(194.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.1.1708" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89341e28 code=0x0 [ 194.184035][ T8960] loop3: detected capacity change from 0 to 1024 [ 194.212589][ T8960] EXT4-fs (loop3): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 194.242509][ T8964] tipc: Enabling of bearer rejected, failed to enable media [ 194.303883][ T8960] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1710'. [ 194.417784][ T4235] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 194.420099][ T4235] Bluetooth: hci0: Injecting HCI hardware error event [ 194.425055][ T4240] Bluetooth: hci0: hardware error 0x00 [ 194.452777][ T8974] loop4: detected capacity change from 0 to 256 [ 194.658174][ T8987] tipc: Enabling of bearer rejected, failed to enable media [ 194.758095][ T8991] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1725'. [ 194.788025][ T4235] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 195.225713][ T9022] loop4: detected capacity change from 0 to 1024 [ 195.232774][ T9022] EXT4-fs (loop4): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 195.275305][ T9022] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1739'. [ 195.357994][ T27] audit: type=1326 audit(195.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.4.1743" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8541e28 code=0x0 [ 195.753387][ T9054] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1754'. [ 195.871080][ T4276] kernel write not supported for file /dsp1 (pid: 4276 comm: kworker/1:6) [ 196.060228][ T4235] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 196.302835][ T9081] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1767'. [ 196.360831][ T4273] kernel write not supported for file /dsp1 (pid: 4273 comm: kworker/0:4) [ 196.574837][ T4240] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 196.651747][ T27] audit: type=1326 audit(196.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1778" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89541e28 code=0x0 [ 196.861834][ T9112] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1781'. [ 196.976161][ T4273] kernel write not supported for file /dsp1 (pid: 4273 comm: kworker/0:4) [ 197.296989][ T9136] loop3: detected capacity change from 0 to 128 [ 197.300014][ T9136] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 197.310244][ T4240] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 197.318079][ T9136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.400032][ T110] kernel write not supported for file /dsp1 (pid: 110 comm: kworker/0:2) [ 197.777749][ T9143] loop3: detected capacity change from 0 to 32768 [ 197.778912][ T9143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1796 (9143) [ 197.780882][ T9143] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.780952][ T9143] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 197.780981][ T9143] BTRFS info (device loop3): using free space tree [ 197.825569][ T9143] BTRFS info (device loop3): enabling ssd optimizations [ 198.066955][ T4229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.067173][ T4568] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 198.371492][ T4276] kernel write not supported for file /dsp1 (pid: 4276 comm: kworker/1:6) [ 198.421696][ T27] audit: type=1326 audit(198.400:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.1808" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c541e28 code=0x0 [ 198.826308][ T4240] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 199.847356][ T9237] loop3: detected capacity change from 0 to 32768 [ 199.861160][ T9237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1827 (9237) [ 199.906346][ T9237] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.908988][ T9237] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 199.911204][ T9237] BTRFS info (device loop3): using free space tree [ 200.172036][ T9237] BTRFS info (device loop3): enabling ssd optimizations [ 200.381126][ T4568] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 200.419615][ T4229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.991395][ T9347] loop3: detected capacity change from 0 to 1024 [ 201.000835][ T9347] hfsplus: failed to load catalog file [ 201.304547][ T27] audit: type=1326 audit(201.280:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.1.1872" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89341e28 code=0x0 [ 201.434487][ T9353] loop4: detected capacity change from 0 to 32768 [ 201.440436][ T9353] XFS (loop4): Invalid device [./file1], error=-15 [ 201.465977][ T8329] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.284422][ T9390] loop3: detected capacity change from 0 to 32768 [ 202.288982][ T9390] XFS (loop3): Invalid device [./file1], error=-15 [ 202.318331][ T8329] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.635632][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.637834][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.639845][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.641698][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.643563][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.653720][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.656751][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.660094][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.662462][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.664857][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.676153][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.683349][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.688045][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.693475][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.696510][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.701834][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.704266][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.706397][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.708396][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.716630][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.718761][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.723231][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.725144][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.727175][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.729166][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.736379][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.738529][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.740539][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.743603][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.745666][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.747511][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.749503][ T4407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 202.766780][ T4407] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 203.290103][ T9445] syz.4.1912 (9445): /proc/9441/oom_adj is deprecated, please use /proc/9441/oom_score_adj instead. [ 203.649750][ T9474] loop4: detected capacity change from 0 to 256 [ 204.615320][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 205.227298][ T9592] binder: 9591:9592 tried to acquire reference to desc 0, got 1 instead [ 205.256876][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1981'. [ 205.279036][ T9592] binder_alloc: 9591: pid 9591 spamming oneway? 1 buffers allocated for a total size of 4096 [ 205.296448][ T4407] binder: send failed reply for transaction 5 to 9591:9592 [ 205.309774][ T4407] binder: undelivered transaction 6, process died. [ 205.311995][ T4407] binder: undelivered TRANSACTION_COMPLETE [ 205.313410][ T4407] binder: undelivered TRANSACTION_COMPLETE [ 205.314969][ T4407] binder: undelivered TRANSACTION_ERROR: 29189 [ 205.666236][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 205.705217][ T9630] binder: 9629:9630 tried to acquire reference to desc 0, got 1 instead [ 205.713322][ T9630] binder_alloc: 9629: pid 9629 spamming oneway? 1 buffers allocated for a total size of 4096 [ 205.718376][ T4277] binder: release 9629:9630 transaction 11 out, still active [ 205.720735][ T4277] binder: undelivered TRANSACTION_COMPLETE [ 205.723610][ T4277] binder: undelivered TRANSACTION_COMPLETE [ 205.746384][ T4277] binder: send failed reply for transaction 11, target dead [ 205.748399][ T4277] binder: undelivered transaction 12, process died. [ 206.109153][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2017'. [ 206.137584][ T9664] capability: warning: `syz.1.2018' uses deprecated v2 capabilities in a way that may be insecure [ 206.337078][ T9678] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.432728][ T9647] loop4: detected capacity change from 0 to 32768 [ 206.456642][ T9647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2010 (9647) [ 206.484619][ T9647] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.487355][ T9647] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 206.489594][ T9647] BTRFS info (device loop4): using free space tree [ 206.500081][ T9687] loop3: detected capacity change from 0 to 1024 [ 206.507321][ T9687] hfsplus: failed to load catalog file [ 206.709212][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 206.811193][ T9722] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.862847][ T9647] BTRFS info (device loop4): enabling ssd optimizations [ 206.917178][ T9737] binder: 9736:9737 tried to acquire reference to desc 0, got 1 instead [ 206.922435][ T9737] binder_alloc: 9736: pid 9736 spamming oneway? 1 buffers allocated for a total size of 4096 [ 206.986439][ T7638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.337483][ T9764] binder: 9761:9764 tried to acquire reference to desc 0, got 1 instead [ 207.340710][ T9764] binder_alloc: 9761: pid 9761 spamming oneway? 1 buffers allocated for a total size of 4096 [ 207.838870][ T9796] binder: 9795:9796 tried to acquire reference to desc 0, got 1 instead [ 207.842325][ T9796] binder_alloc: 9795: pid 9795 spamming oneway? 1 buffers allocated for a total size of 4096 [ 207.865407][ T9768] loop4: detected capacity change from 0 to 32768 [ 207.878147][ T9768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2056 (9768) [ 207.898477][ T9768] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.913124][ T9768] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 207.915481][ T9768] BTRFS info (device loop4): using free space tree [ 208.102630][ T9768] BTRFS info (device loop4): enabling ssd optimizations [ 208.288538][ T7638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.994858][ T9879] loop4: detected capacity change from 0 to 32768 [ 209.012814][ T9879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2096 (9879) [ 209.026951][ T9879] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.033659][ T9879] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 209.038425][ T9879] BTRFS info (device loop4): using free space tree [ 209.213176][ T9879] BTRFS info (device loop4): enabling ssd optimizations [ 209.317791][ T7638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.615515][ T9945] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 209.661686][ T9945] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 210.248139][ T9980] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.274316][ T9980] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 210.614657][T10008] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 210.624101][T10008] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 211.104584][T10025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2152'. [ 211.398203][T10041] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 211.413028][T10041] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 211.613878][T10061] loop4: detected capacity change from 0 to 512 [ 211.640337][T10061] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 211.651384][T10061] EXT4-fs (loop4): 1 truncate cleaned up [ 211.652810][T10061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.667059][T10061] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2166: Logical block already allocated [ 211.679227][T10061] EXT4-fs (loop4): Remounting filesystem read-only [ 211.764680][ T7638] EXT4-fs (loop4): unmounting filesystem. [ 211.825336][T10076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2170'. [ 212.063952][T10086] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.077826][T10086] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 212.335964][T10101] loop4: detected capacity change from 0 to 512 [ 212.344255][T10101] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 212.347554][T10101] EXT4-fs (loop4): 1 truncate cleaned up [ 212.349287][T10101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 212.367026][T10101] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2181: Logical block already allocated [ 212.370481][T10101] EXT4-fs (loop4): Remounting filesystem read-only [ 212.461595][ T7638] EXT4-fs (loop4): unmounting filesystem. [ 212.541568][T10112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2183'. [ 212.709056][T10131] loop3: detected capacity change from 0 to 512 [ 212.729867][T10131] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 212.756751][T10131] EXT4-fs (loop3): 1 truncate cleaned up [ 212.758212][T10131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 212.800265][T10131] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.2193: Logical block already allocated [ 212.813874][T10131] EXT4-fs (loop3): Remounting filesystem read-only [ 212.998517][ T4229] EXT4-fs (loop3): unmounting filesystem. [ 213.039930][T10148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2198'. [ 213.428534][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2210'. [ 213.830549][ T4235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.835548][ T4235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.844557][ T4235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.851548][ T4235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.855204][ T4235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.858505][ T4235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.074482][T10198] loop3: detected capacity change from 0 to 32768 [ 214.087868][ T6893] device syz_tun left promiscuous mode [ 214.092729][T10198] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.2221 (10198) [ 214.100111][T10198] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 214.102771][T10198] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 214.117838][T10198] BTRFS info (device loop3): disabling tree log [ 214.119534][T10198] BTRFS info (device loop3): turning on sync discard [ 214.121230][T10198] BTRFS info (device loop3): force clearing of disk cache [ 214.126714][T10198] BTRFS info (device loop3): enabling ssd optimizations [ 214.132468][T10198] BTRFS info (device loop3): using spread ssd allocation scheme [ 214.134493][T10198] BTRFS info (device loop3): using free space tree [ 214.307550][T10198] BTRFS info (device loop3): rebuilding free space tree [ 214.453790][ T4229] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 214.673526][ T4630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.682857][T10200] chnl_net:caif_netlink_parms(): no params data found [ 214.838011][ T4630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.850250][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.852129][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.865858][T10200] device bridge_slave_0 entered promiscuous mode [ 214.986445][ T4630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.990386][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.992889][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.996843][T10200] device bridge_slave_1 entered promiscuous mode [ 215.041876][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.046098][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.187384][ T4630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.215495][T10200] team0: Port device team_slave_0 added [ 215.222469][T10200] team0: Port device team_slave_1 added [ 215.262924][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.264697][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.294426][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.306551][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.310359][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.332261][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.473233][T10257] loop4: detected capacity change from 0 to 32768 [ 215.475649][T10257] XFS (loop4): Invalid device [./file1], error=-15 [ 215.487313][T10200] device hsr_slave_0 entered promiscuous mode [ 215.515797][T10200] device hsr_slave_1 entered promiscuous mode [ 215.581731][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.583700][T10200] Cannot create hsr debugfs directory [ 216.100719][ T4235] Bluetooth: hci2: command tx timeout [ 216.940397][T10329] loop3: detected capacity change from 0 to 32768 [ 216.999507][T10329] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 217.024234][T10329] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 217.150575][T10329] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 217.204173][ T9859] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 217.206835][ T9859] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 217.210368][T10200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.254560][T10200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.283833][T10200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.291510][ T9859] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 217.304121][ T9859] gfs2: fsid=syz:syz.0: jid=0: Done [ 217.310693][T10329] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 217.742695][T10200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.354220][ T4235] Bluetooth: hci2: command tx timeout [ 218.378263][ T4630] device batadv_slave_1 left promiscuous mode [ 218.466875][ T4630] device hsr_slave_0 left promiscuous mode [ 218.516995][ T4630] device hsr_slave_1 left promiscuous mode [ 218.603397][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.605467][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.609199][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.611345][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.618649][ T4630] device bridge_slave_1 left promiscuous mode [ 218.621699][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.669293][ T4630] device bridge_slave_0 left promiscuous mode [ 218.671177][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.824975][ T4630] device veth1_macvtap left promiscuous mode [ 218.826770][ T4630] device veth0_macvtap left promiscuous mode [ 218.828618][ T4630] device veth1_vlan left promiscuous mode [ 218.831543][ T4630] device veth0_vlan left promiscuous mode [ 220.607653][ T4235] Bluetooth: hci2: command tx timeout [ 221.090160][ T4630] team0 (unregistering): Port device team_slave_1 removed [ 221.315034][ T4630] team0 (unregistering): Port device team_slave_0 removed [ 221.540999][ T4630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.756771][ T4630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.864166][ T4240] Bluetooth: hci2: command tx timeout [ 224.513710][ T4630] bond0 (unregistering): Released all slaves [ 224.811017][T10405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2287'. [ 224.875650][T10200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.920931][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.923345][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.928106][T10200] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.933041][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.935481][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.937928][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.939754][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.955697][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.958291][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.960963][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.964812][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.966657][ T9934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.968914][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.984432][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.020765][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.023967][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.026515][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.040136][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.047533][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.050563][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.055839][T10200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.058871][T10200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.076962][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.085979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.089055][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.782947][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.820561][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.822923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.900886][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.903616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.995707][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.998162][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.001081][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.003796][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.090207][T10200] device veth0_vlan entered promiscuous mode [ 226.123005][T10200] device veth1_vlan entered promiscuous mode [ 226.382888][T10449] sp0: Synchronizing with TNC [ 226.390682][T10200] device veth0_macvtap entered promiscuous mode [ 226.410330][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.413223][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.417112][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.420846][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.471216][T10200] device veth1_macvtap entered promiscuous mode [ 226.586891][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.598977][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.608124][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.611457][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.622578][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.625264][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.627542][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.630084][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.639529][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.647142][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.670340][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.672400][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.689507][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.697104][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.702625][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.720042][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.722615][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.723266][T10427] loop3: detected capacity change from 0 to 32768 [ 226.734588][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.741866][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.744509][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.746989][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.763369][T10427] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 226.772405][T10427] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 226.783747][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.786414][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.788736][T10200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.791252][T10200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.813968][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.815165][T10427] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 226.829841][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.832317][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.844732][ T4278] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 226.846446][ T4278] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 226.933634][T10200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.933958][ T4278] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 80ms [ 226.936295][T10200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.940106][T10200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.943852][ T4278] gfs2: fsid=syz:syz.0: jid=0: Done [ 226.945348][T10427] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 226.949835][T10200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.230336][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.232445][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.238185][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.468659][ T6156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.472256][ T6156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.532202][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.563260][T10480] sp0: Synchronizing with TNC [ 228.953231][T10520] sp0: Synchronizing with TNC [ 230.398047][T10514] loop4: detected capacity change from 0 to 32768 [ 230.510559][T10514] XFS (loop4): Mounting V5 Filesystem [ 230.555146][T10514] XFS (loop4): Ending clean mount [ 230.646948][T10561] loop3: detected capacity change from 0 to 512 [ 230.653590][ T7638] XFS (loop4): Unmounting Filesystem [ 230.697937][T10419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.743545][T10560] sp0: Synchronizing with TNC [ 230.982732][T10567] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2349'. [ 231.012112][T10567] device gretap0 entered promiscuous mode [ 231.247805][T10568] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2349'. [ 231.253260][T10568] 0XD: renamed from gretap0 [ 231.323734][T10568] device 30XD left promiscuous mode [ 231.333770][T10568] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 232.179931][T10591] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 232.786493][T10597] [U] #! ./file0 [ 232.787771][T10597] [U] *|d.d [ 233.071546][T10601] sp0: Synchronizing with TNC [ 233.412285][T10617] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 233.588031][T10623] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2370'. [ 233.597900][T10623] device gretap0 entered promiscuous mode [ 233.694289][T10623] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2370'. [ 233.698025][T10623] 0XD: renamed from gretap0 [ 234.249125][T10623] device 30XD left promiscuous mode [ 234.251753][T10623] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 234.373098][T10628] [U] #! ./file0 [ 234.374134][T10628] [U] *|d.d [ 234.497498][T10632] sp0: Synchronizing with TNC [ 235.153879][T10649] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 235.514369][T10658] [U] #! ./file0 [ 235.515376][T10658] [U] *|d.d [ 235.862087][ C0] sched: RT throttling activated [ 235.957999][T10661] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2392'. [ 236.241012][T10661] device gretap0 entered promiscuous mode [ 236.317194][T10662] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2392'. [ 236.320649][T10662] 0XD: renamed from gretap0 [ 236.578940][T10662] device 30XD left promiscuous mode [ 236.581710][T10662] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 236.739053][T10667] sp0: Synchronizing with TNC [ 236.906098][T10681] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 236.906296][T10682] [U] #! ./file0 [ 236.909867][T10682] [U] *|d.d [ 237.059842][T10692] loop3: detected capacity change from 0 to 512 [ 237.118420][T10419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.402855][T10695] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2408'. [ 237.411934][T10695] device 30XD entered promiscuous mode [ 237.505640][T10695] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2408'. [ 237.508955][T10695] 1XD: renamed from 30XD [ 237.594510][T10695] device 31XD left promiscuous mode [ 237.604220][T10695] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 238.289604][ T4235] Bluetooth: hci3: command 0x0406 tx timeout [ 240.477940][T10726] [U] #! ./file0 [ 240.478908][T10726] [U] *|d.d [ 240.836187][T10732] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 240.927783][T10719] loop4: detected capacity change from 0 to 32768 [ 241.005091][T10736] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2425'. [ 241.011661][T10736] device 30XD entered promiscuous mode [ 241.322688][T10737] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2425'. [ 241.326318][T10737] 1XD: renamed from 30XD [ 241.384951][T10737] device 31XD left promiscuous mode [ 241.393603][T10737] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 241.700609][T10719] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.2420 (10719) [ 241.729659][T10719] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 241.732352][T10719] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 241.748966][T10719] BTRFS info (device loop4): using free space tree [ 241.938451][T10728] loop3: detected capacity change from 0 to 32768 [ 241.977431][T10719] BTRFS info (device loop4): enabling ssd optimizations [ 242.022588][T10728] XFS (loop3): Mounting V5 Filesystem [ 242.029128][ T7638] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 242.243239][T10728] XFS (loop3): Ending clean mount [ 243.327053][T10800] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2441'. [ 243.514858][ T4229] XFS (loop3): Unmounting Filesystem [ 243.519460][T10800] device gretap0 entered promiscuous mode [ 244.046500][T10801] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2441'. [ 244.049251][T10801] 0XD: renamed from gretap0 [ 244.155240][T10801] device 30XD left promiscuous mode [ 244.158384][T10801] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 245.633941][T10839] loop4: detected capacity change from 0 to 1764 [ 245.703785][T10839] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 246.033938][T10856] loop4: detected capacity change from 0 to 512 [ 246.108728][T10419] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.097606][T10861] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2465'. [ 247.108962][T10860] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2465'. [ 247.780656][T10860] device gretap0 entered promiscuous mode [ 249.295852][T10892] loop3: detected capacity change from 0 to 512 [ 249.466460][T10419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.090880][T10907] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2479'. [ 250.707269][T10907] device 31XD entered promiscuous mode [ 250.711937][T10908] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2479'. [ 250.714601][T10908] 0XD: renamed from 31XD [ 250.738603][T10908] device 30XD left promiscuous mode [ 250.741140][T10908] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 251.334723][T10929] loop3: detected capacity change from 0 to 1764 [ 251.498609][T10929] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 252.703359][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.705309][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.856690][ T4235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.864538][ T4235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.872356][ T4235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.875202][ T4235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.877707][ T4235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.879922][ T4235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.259004][T10967] loop4: detected capacity change from 0 to 1764 [ 253.300379][ T4229] device syz_tun left promiscuous mode [ 253.461065][T10967] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 254.490804][T10947] chnl_net:caif_netlink_parms(): no params data found [ 254.939807][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.945366][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.963235][T10947] device bridge_slave_0 entered promiscuous mode [ 255.141733][ T4240] Bluetooth: hci4: command tx timeout [ 255.144053][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.195400][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.197957][T10947] device bridge_slave_1 entered promiscuous mode [ 255.322636][T10947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.352129][T10947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.487357][T10947] team0: Port device team_slave_0 added [ 255.505366][T10947] team0: Port device team_slave_1 added [ 255.552786][T10947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.554572][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.580505][T10947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.591719][T10947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.593480][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.612184][T10947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.702127][T10947] device hsr_slave_0 entered promiscuous mode [ 255.712791][T10947] device hsr_slave_1 entered promiscuous mode [ 255.758975][T10947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.760941][T10947] Cannot create hsr debugfs directory [ 256.205452][T10947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.471454][T10947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.539019][T11028] loop4: detected capacity change from 0 to 32768 [ 256.544562][T11028] XFS: ikeep mount option is deprecated. [ 256.549070][T11028] XFS: ikeep mount option is deprecated. [ 256.774737][T10947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.775511][T11028] XFS (loop4): Mounting V5 Filesystem [ 256.883471][T11028] XFS (loop4): Ending clean mount [ 256.959371][T11028] XFS (loop4): Quotacheck needed: Please wait. [ 257.218954][T10947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.221101][T11028] XFS (loop4): Quotacheck: Done. [ 257.357449][ T4240] Bluetooth: hci4: command tx timeout [ 257.406251][ T7638] XFS (loop4): Unmounting Filesystem [ 257.611846][T10947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.675072][T10947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.737155][T10947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.771022][T10947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.947555][T10947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.965201][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.967687][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.972668][T10947] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.981145][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.983685][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.987659][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.989528][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.996875][ T3807] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 258.009019][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.011425][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.022106][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.024556][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.026411][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.028590][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.046629][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.049391][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.053948][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.056593][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.098246][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.101368][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.104479][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.109078][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.111909][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.129534][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.134781][T10947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.267590][ T3807] usb 1-1: Using ep0 maxpacket: 8 [ 258.398685][ T3807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.401162][ T3807] usb 1-1: config 0 has no interface number 0 [ 258.402784][ T3807] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.405885][ T3807] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.422272][ T3807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.529879][ T3807] usb 1-1: config 0 descriptor?? [ 258.732187][ T3807] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 258.848709][ T1510] usb 1-1: USB disconnect, device number 2 [ 258.868401][ T1510] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 259.048214][T10947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.051633][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.053638][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.152639][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.162657][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.295853][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.299300][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.302339][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.311581][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.344669][T10947] device veth0_vlan entered promiscuous mode [ 259.395716][T10947] device veth1_vlan entered promiscuous mode [ 259.461182][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.463701][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.466543][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.473532][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.478345][T10947] device veth0_macvtap entered promiscuous mode [ 259.509819][T11085] loop4: detected capacity change from 0 to 32768 [ 259.512070][T11085] XFS: ikeep mount option is deprecated. [ 259.519349][T11085] XFS: ikeep mount option is deprecated. [ 259.543411][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.554343][T10947] device veth1_macvtap entered promiscuous mode [ 259.584721][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.587598][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.598142][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.605764][T11085] XFS (loop4): Mounting V5 Filesystem [ 259.686944][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.689895][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.692494][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.695188][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.708682][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.711207][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.717933][ T4235] Bluetooth: hci4: command tx timeout [ 259.723155][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.747585][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.760492][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.798381][T10947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.800987][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.803540][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.842903][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.845589][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.857327][T11085] XFS (loop4): Ending clean mount [ 259.862374][T11085] XFS (loop4): Quotacheck needed: Please wait. [ 259.868895][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.880596][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.891588][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.910409][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.912980][T11085] XFS (loop4): Quotacheck: Done. [ 259.918724][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.921296][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.928465][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.931343][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.942314][T10947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.947357][T10947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.969880][T10947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.980655][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.983579][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.001984][T10947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.004353][T10947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.033437][T10947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.054135][T10947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.064498][ T7638] XFS (loop4): Unmounting Filesystem [ 260.189633][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.193445][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.233282][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.235588][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.247515][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.392780][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.395485][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.402590][ T3807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.604708][T11149] loop4: detected capacity change from 0 to 64 [ 261.951260][ T4240] Bluetooth: hci4: command tx timeout [ 262.167711][ T4411] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 262.245414][T11156] loop3: detected capacity change from 0 to 32768 [ 262.247835][T11156] XFS: ikeep mount option is deprecated. [ 262.287058][T11156] XFS: ikeep mount option is deprecated. [ 262.329792][T11156] XFS (loop3): Mounting V5 Filesystem [ 262.400809][T11156] XFS (loop3): Ending clean mount [ 262.404877][T11156] XFS (loop3): Quotacheck needed: Please wait. [ 262.433897][T11156] XFS (loop3): Quotacheck: Done. [ 262.452542][ T4411] usb 1-1: Using ep0 maxpacket: 8 [ 262.579612][ T4411] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.581737][ T4411] usb 1-1: config 0 has no interface number 0 [ 262.583338][ T4411] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.586846][ T4411] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.599368][T10947] XFS (loop3): Unmounting Filesystem [ 262.611997][ T4411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.633570][ T4411] usb 1-1: config 0 descriptor?? [ 262.683666][ T4411] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 262.963142][ T4411] usb 1-1: USB disconnect, device number 3 [ 262.966052][ T4411] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 263.228367][T11239] loop3: detected capacity change from 0 to 64 [ 263.361944][T11247] loop3: detected capacity change from 0 to 64 [ 263.915046][ T27] audit: type=1326 audit(259.163:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89341e28 code=0x7fc00000 [ 263.921010][ T27] audit: type=1326 audit(259.163:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff89341e28 code=0x7fc00000 [ 263.948181][ T27] audit: type=1326 audit(259.163:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89341e28 code=0x7fc00000 [ 264.100045][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.116266][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.366446][ T27] audit: type=1326 audit(259.578:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d41e28 code=0x7fc00000 [ 264.372168][ T27] audit: type=1326 audit(259.587:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96d41e28 code=0x7fc00000 [ 264.400642][ T27] audit: type=1326 audit(259.587:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.3.2639" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d41e28 code=0x7fc00000 [ 264.601201][T11291] loop4: detected capacity change from 0 to 32768 [ 264.663729][T11291] XFS (loop4): Mounting V5 Filesystem [ 264.697751][T11291] XFS (loop4): Ending clean mount [ 264.766260][ T7638] XFS (loop4): Unmounting Filesystem [ 264.859259][T11318] loop3: detected capacity change from 0 to 32768 [ 264.876707][T11318] XFS: ikeep mount option is deprecated. [ 264.879934][T11318] XFS: ikeep mount option is deprecated. [ 264.931186][T11318] XFS (loop3): Mounting V5 Filesystem [ 264.988228][T11318] XFS (loop3): Ending clean mount [ 264.992508][T11318] XFS (loop3): Quotacheck needed: Please wait. [ 265.049190][T11318] XFS (loop3): Quotacheck: Done. [ 265.059572][ T27] audit: type=1326 audit(260.215:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.2656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2141e28 code=0x7fc00000 [ 265.072860][ T27] audit: type=1326 audit(260.224:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.2656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa2141e28 code=0x7fc00000 [ 265.078413][ T27] audit: type=1326 audit(260.224:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.2656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2141e28 code=0x7fc00000 [ 265.164334][T10947] XFS (loop3): Unmounting Filesystem [ 265.229693][T11369] loop4: detected capacity change from 0 to 64 [ 265.387716][T11373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.391795][T11373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.587253][ T4278] kernel read not supported for file /635/net/raw (pid: 4278 comm: kworker/0:6) [ 265.662978][ T27] audit: type=1326 audit(260.778:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11382 comm="syz.2.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c541e28 code=0x7fc00000 [ 265.700928][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 266.291875][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 266.704263][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 266.772821][ T4411] kernel read not supported for file /46/net/raw (pid: 4411 comm: kworker/0:12) [ 266.998280][ T4240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.007413][ T4240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.022178][ T4240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.028205][ T4240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.030521][ T4240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.032869][ T4240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.092304][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 267.417157][T11466] chnl_net:caif_netlink_parms(): no params data found [ 267.766121][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 267.810092][ T4859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.866175][ T9859] kernel read not supported for file /809/net/raw (pid: 9859 comm: kworker/0:17) [ 267.914739][ T4859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.923110][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.924985][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.927375][T11466] device bridge_slave_0 entered promiscuous mode [ 267.932844][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.936005][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.941208][T11466] device bridge_slave_1 entered promiscuous mode [ 267.961933][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.978010][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.078606][ T4859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.123472][T11466] team0: Port device team_slave_0 added [ 268.140898][T11466] team0: Port device team_slave_1 added [ 268.236684][ T4859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.253190][T11466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.254956][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.264642][T11466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.270098][T11466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.271861][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.279109][T11466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.366926][T11466] device hsr_slave_0 entered promiscuous mode [ 268.398288][T11466] device hsr_slave_1 entered promiscuous mode [ 268.405811][T11522] loop3: detected capacity change from 0 to 32768 [ 268.430235][T11466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.432445][T11466] Cannot create hsr debugfs directory [ 268.518444][T11522] XFS (loop3): Mounting V5 Filesystem [ 268.666227][T11522] XFS (loop3): Ending clean mount [ 268.768350][T10947] XFS (loop3): Unmounting Filesystem [ 269.020212][ T110] kernel read not supported for file /626/net/raw (pid: 110 comm: kworker/0:2) [ 269.183169][T11584] loop4: detected capacity change from 0 to 64 [ 269.231818][ T4235] Bluetooth: hci1: command tx timeout [ 269.745728][T11624] loop3: detected capacity change from 0 to 64 [ 270.072017][T11466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.106147][ T4411] kernel read not supported for file /637/net/raw (pid: 4411 comm: kworker/0:12) [ 270.111938][T11466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.211147][T11466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.431118][T11666] binder: 11665 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 270.431142][T11666] binder: 11665:11666 ioctl c018620c 20000080 returned -22 [ 270.443225][T11466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.627260][T11676] loop3: detected capacity change from 0 to 64 [ 270.768398][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2782'. [ 270.773277][T11684] netlink: 'syz.2.2782': attribute type 2 has an invalid length. [ 270.822637][T11686] loop3: detected capacity change from 0 to 1024 [ 270.829803][T11686] hfsplus: creator requires a 4 character value [ 270.840058][T11686] hfsplus: unable to parse mount options [ 270.901936][T10419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.927297][T11694] binder: 11692 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 270.927322][T11694] binder: 11692:11694 ioctl c018620c 20000080 returned -22 [ 271.122559][T11708] loop4: detected capacity change from 0 to 64 [ 271.192271][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 271.214636][T11715] netlink: 'syz.3.2794': attribute type 2 has an invalid length. [ 271.485411][ T4235] Bluetooth: hci1: command tx timeout [ 271.511054][T11731] binder: 11730 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 271.511080][T11731] binder: 11730:11731 ioctl c018620c 20000080 returned -22 [ 271.592991][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.604182][T11735] device sit0 entered promiscuous mode [ 271.613875][T11735] netlink: 'syz.4.2800': attribute type 1 has an invalid length. [ 271.643788][T11735] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2800'. [ 271.783556][ T4859] device hsr_slave_0 left promiscuous mode [ 271.808307][T11748] ucma_write: process 248 (syz.0.2805) changed security contexts after opening file descriptor, this is not allowed. [ 271.840069][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2806'. [ 271.842403][T11752] netlink: 'syz.2.2806': attribute type 2 has an invalid length. [ 271.883486][ T4859] device hsr_slave_1 left promiscuous mode [ 271.893837][T11759] binder: 11758 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 271.893861][T11759] binder: 11758:11759 ioctl c018620c 20000080 returned -22 [ 271.975028][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.977367][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.995274][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.997253][ T4859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.018845][ T4859] device bridge_slave_1 left promiscuous mode [ 272.020492][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.035290][T11767] loop4: detected capacity change from 0 to 1024 [ 272.045496][T11767] hfsplus: creator requires a 4 character value [ 272.047159][T11767] hfsplus: unable to parse mount options [ 272.077044][ T4859] device bridge_slave_0 left promiscuous mode [ 272.078771][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.363141][ T4859] device veth1_macvtap left promiscuous mode [ 272.364867][ T4859] device veth0_macvtap left promiscuous mode [ 272.366560][ T4859] device veth1_vlan left promiscuous mode [ 272.368319][ T4859] device veth0_vlan left promiscuous mode [ 272.500665][T11790] binder: 11789 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 272.500702][T11790] binder: 11789:11790 ioctl c018620c 20000080 returned -22 [ 272.547588][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 272.550237][T11792] netlink: 'syz.4.2821': attribute type 2 has an invalid length. [ 272.784841][T11800] loop4: detected capacity change from 0 to 1024 [ 272.797974][T11800] hfsplus: creator requires a 4 character value [ 272.801730][T11800] hfsplus: unable to parse mount options [ 272.844445][T10419] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.156045][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 273.158418][T11812] netlink: 'syz.4.2831': attribute type 2 has an invalid length. [ 273.738698][ T4240] Bluetooth: hci1: command tx timeout [ 274.667289][ T4859] team0 (unregistering): Port device team_slave_1 removed [ 274.848012][ T4859] team0 (unregistering): Port device team_slave_0 removed [ 275.050545][ T4859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.300329][ T4859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.992244][ T4235] Bluetooth: hci1: command tx timeout [ 278.382587][ T4859] bond0 (unregistering): Released all slaves [ 278.653454][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.659481][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.661809][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.664557][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.667334][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.670068][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.671989][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.675149][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.687594][T11777] device sit0 entered promiscuous mode [ 278.699074][T11777] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 278.732323][T11777] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2815'. [ 278.794750][T11466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.798000][T11466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.825983][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.828784][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.831723][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.833638][ T9859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.842637][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.845453][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.856919][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.867826][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.886448][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.889378][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.892014][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.894560][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.933550][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.935974][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.962945][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.965550][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.205176][T11871] device sit0 entered promiscuous mode [ 279.216780][T11871] netlink: 'syz.2.2859': attribute type 1 has an invalid length. [ 279.231158][T11871] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2859'. [ 279.368178][T11886] loop3: detected capacity change from 0 to 512 [ 279.398336][T11886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 279.464302][T11466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.483203][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.485259][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.491223][T10947] EXT4-fs (loop3): unmounting filesystem. [ 279.558091][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.561312][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.608393][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.611791][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.614810][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.621455][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.636226][T11466] device veth0_vlan entered promiscuous mode [ 279.664451][T11466] device veth1_vlan entered promiscuous mode [ 279.676553][T11907] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 279.678714][T11907] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2876'. [ 279.719041][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.721781][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.724304][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.726960][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.748963][T11466] device veth0_macvtap entered promiscuous mode [ 279.769410][T11466] device veth1_macvtap entered promiscuous mode [ 279.778408][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.781572][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.825490][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.839301][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.841952][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.844587][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.846915][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.879859][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.894152][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.896810][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.899385][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.901886][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.945127][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.957567][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.965136][T11466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.000061][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.002987][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.017382][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.020002][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.044179][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.046968][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.049370][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.051885][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.054587][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.094372][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.096992][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.117354][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.126756][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.129575][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.164705][T11466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.174877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.177526][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.184154][T11466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.190293][T11466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.192466][T11466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.221328][T11466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.231921][T11935] device sit0 entered promiscuous mode [ 280.248945][T11935] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 280.271885][T11935] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2889'. [ 280.475005][ T6156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.477210][ T6156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.520644][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.568403][ T1805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.570654][ T1805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.590109][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.802809][T11972] loop3: detected capacity change from 0 to 8 [ 280.910006][T11972] SQUASHFS error: Failed to read block 0x4e8: -5 [ 280.913414][T11972] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 280.916562][T11972] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 280.918632][T11972] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 280.920528][T11972] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 281.005237][T11984] loop4: detected capacity change from 0 to 1024 [ 281.117328][ T4567] hfsplus: b-tree write err: -5, ino 4 [ 282.118638][T12058] loop4: detected capacity change from 0 to 1024 [ 282.164335][T12017] loop3: detected capacity change from 0 to 32768 [ 282.192415][T12017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2928 (12017) [ 282.205465][T12017] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.208101][T12017] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 282.210163][T12017] BTRFS info (device loop3): using free space tree [ 282.269516][ T1805] hfsplus: b-tree write err: -5, ino 4 [ 282.540110][T12017] BTRFS info (device loop3): enabling ssd optimizations [ 282.650089][T10947] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.044482][T12129] loop4: detected capacity change from 0 to 4096 [ 283.084814][T12129] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 283.090526][T12129] ntfs3: loop4: Failed to load $MFT. [ 283.183185][T11894] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.324688][T12153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2984'. [ 283.526880][T12162] loop3: detected capacity change from 0 to 2048 [ 283.528953][T12162] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.614847][T12162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.746591][T10947] EXT4-fs (loop3): unmounting filesystem. [ 283.835665][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2997'. [ 283.963769][ T4235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.972413][ T4235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.975814][ T4235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.995145][ T4235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.999582][ T4235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.001850][ T4235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.261603][T12202] loop3: detected capacity change from 0 to 4096 [ 284.280378][T12202] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 284.286982][T12202] ntfs3: loop3: Failed to load $MFT. [ 284.302220][ T9641] device syz_tun left promiscuous mode [ 284.487849][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3013'. [ 284.832500][ T6156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.924252][T12189] chnl_net:caif_netlink_parms(): no params data found [ 285.026347][T12237] loop3: detected capacity change from 0 to 4096 [ 285.048233][T12237] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 285.051838][ T6156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.053361][T12237] ntfs3: loop3: Failed to load $MFT. [ 285.112831][T11841] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.153031][T12252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3025'. [ 285.203974][ T6156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.210730][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.212693][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.215533][T12189] device bridge_slave_0 entered promiscuous mode [ 285.224236][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.226153][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.236012][T12189] device bridge_slave_1 entered promiscuous mode [ 285.314126][ T6156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.337106][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3027'. [ 285.378213][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.386532][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.478711][T12189] team0: Port device team_slave_0 added [ 285.482540][T12189] team0: Port device team_slave_1 added [ 285.512563][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.512583][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.512603][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.513870][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.513884][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.513904][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.636866][T12189] device hsr_slave_0 entered promiscuous mode [ 285.679284][T12189] device hsr_slave_1 entered promiscuous mode [ 285.721843][T12189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.723775][T12189] Cannot create hsr debugfs directory [ 285.856270][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3037'. [ 286.133572][T12284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.147126][T12284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.150671][T12284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.221178][T12284] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 286.224656][T12284] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 286.242609][ T4235] Bluetooth: hci5: command tx timeout [ 286.894722][T12271] loop3: detected capacity change from 0 to 32768 [ 286.931825][T12271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3033 (12271) [ 286.943608][T12271] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.949905][T12271] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 286.953844][T12271] BTRFS info (device loop3): using free space tree [ 287.151135][T12271] BTRFS info (device loop3): enabling ssd optimizations [ 287.266696][T10947] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 287.927220][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.939261][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.942566][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.473275][ T4235] Bluetooth: hci5: command tx timeout [ 288.677782][T12361] 9pnet_virtio: no channels available for device syz [ 288.688227][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 288.858796][T12368] bridge0: port 3(gretap0) entered blocking state [ 288.861658][T12368] bridge0: port 3(gretap0) entered disabled state [ 288.875404][T12368] device gretap0 entered promiscuous mode [ 288.880707][T12368] bridge0: port 3(gretap0) entered blocking state [ 288.883305][T12368] bridge0: port 3(gretap0) entered forwarding state [ 288.907356][T12368] device gretap0 left promiscuous mode [ 288.910261][T12368] bridge0: port 3(gretap0) entered disabled state [ 289.625185][T12189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.669037][T12189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.699357][T12189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.726909][ T4240] Bluetooth: hci5: command tx timeout [ 290.744005][T12391] loop3: detected capacity change from 0 to 512 [ 290.755000][T12391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.758034][T12391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.779989][T12189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.807556][T12391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 290.817054][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.820731][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.822718][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.835608][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 290.837654][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 290.900287][T12391] System zones: 1-12 [ 290.907144][T12391] EXT4-fs (loop3): 1 truncate cleaned up [ 290.908716][T12391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.925505][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 291.053954][T10947] EXT4-fs (loop3): unmounting filesystem. [ 291.197004][T12414] bridge0: port 3(gretap0) entered blocking state [ 291.199133][T12414] bridge0: port 3(gretap0) entered disabled state [ 291.208338][T12414] device gretap0 entered promiscuous mode [ 291.213526][T12414] bridge0: port 3(gretap0) entered blocking state [ 291.215419][T12414] bridge0: port 3(gretap0) entered forwarding state [ 291.294246][T12414] device gretap0 left promiscuous mode [ 291.296404][T12414] bridge0: port 3(gretap0) entered disabled state [ 291.919607][T12417] 9pnet_virtio: no channels available for device syz [ 292.212714][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.302067][ T6156] device batadv_slave_1 left promiscuous mode [ 292.396126][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 292.980353][ T4240] Bluetooth: hci5: command tx timeout [ 293.209838][ T6156] device hsr_slave_0 left promiscuous mode [ 293.262980][ T6156] device hsr_slave_1 left promiscuous mode [ 293.370465][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.372494][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.379036][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.380886][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.390818][ T6156] device bridge_slave_1 left promiscuous mode [ 293.398829][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.460775][ T6156] device bridge_slave_0 left promiscuous mode [ 293.462588][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.621728][ T6156] device veth1_macvtap left promiscuous mode [ 293.623376][ T6156] device veth0_macvtap left promiscuous mode [ 293.625061][ T6156] device veth1_vlan left promiscuous mode [ 293.626574][ T6156] device veth0_vlan left promiscuous mode [ 296.722522][ T6156] team0 (unregistering): Port device team_slave_1 removed [ 296.948853][ T6156] team0 (unregistering): Port device team_slave_0 removed [ 297.153115][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.390766][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.460363][ T6156] bond0 (unregistering): Released all slaves [ 300.751840][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.755496][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.757597][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.782715][T12189] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.832522][T12189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.838463][T12189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.846171][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.848528][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.850941][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.853485][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.856007][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.857943][ T4675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.897287][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.919657][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.922151][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.923943][ T4675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.926262][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.929047][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.931637][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.952430][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.963419][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.968586][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.971147][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.983941][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.987033][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.989570][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.992247][T12481] bridge0: port 3(gretap0) entered blocking state [ 300.993904][T12481] bridge0: port 3(gretap0) entered disabled state [ 300.996404][T12481] device gretap0 entered promiscuous mode [ 300.998450][T12481] bridge0: port 3(gretap0) entered blocking state [ 301.000148][T12481] bridge0: port 3(gretap0) entered forwarding state [ 301.002457][T12482] device gretap0 left promiscuous mode [ 301.004037][T12482] bridge0: port 3(gretap0) entered disabled state [ 301.068756][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.071394][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.083204][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.177037][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.179392][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.193203][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.548533][ T9856] kernel write not supported for file /vcsa1 (pid: 9856 comm: kworker/0:15) [ 301.578808][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.580071][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.648799][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.653575][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.656291][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.657252][T12539] 9pnet_fd: Insufficient options for proto=fd [ 301.665896][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.668574][T12189] device veth0_vlan entered promiscuous mode [ 301.675793][T12189] device veth1_vlan entered promiscuous mode [ 301.699799][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.703349][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.705794][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.722790][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.743959][T12189] device veth0_macvtap entered promiscuous mode [ 301.748868][T12189] device veth1_macvtap entered promiscuous mode [ 301.776268][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.780764][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.783322][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.785749][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.788265][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.797435][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.802435][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.804959][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.807529][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.816700][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.823338][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.826179][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.840254][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.851609][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.854585][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.857189][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.860495][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.879412][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.881948][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.884334][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.929045][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.938399][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.948857][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.952200][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.954900][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.957299][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.966130][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.968523][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.982990][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.996015][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.000941][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.003508][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.036826][T12189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.039876][T12189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.042125][T12189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.044376][T12189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.202510][T12565] 9pnet_fd: Insufficient options for proto=fd [ 302.222726][ T4938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.224816][ T4938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.230614][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.281015][ T4938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.283330][ T4938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.294206][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.885818][T12607] binder: 12606:12607 tried to acquire reference to desc 0, got 1 instead [ 302.899634][ T4217] binder_debug: 15 callbacks suppressed [ 302.899649][ T4217] binder: release 12606:12607 transaction 35 out, still active [ 302.902960][ T4217] binder: undelivered TRANSACTION_COMPLETE [ 302.940297][ T4273] binder: send failed reply for transaction 35, target dead [ 303.113241][T12623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3149'. [ 303.573128][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3164'. [ 303.994730][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3176'. [ 304.219385][T12683] loop4: detected capacity change from 0 to 16384 [ 304.249987][T12683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 304.256798][T12683] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 304.276417][T12683] REISERFS (device loop4): using ordered data mode [ 304.288790][T12683] reiserfs: using flush barriers [ 304.294361][T12683] REISERFS warning (device loop4): journal-1393 journal_init: journal 1st super block is invalid: 1st reserved block 34, but actual 1st block is 16 [ 304.320861][T12683] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 304.501097][T12696] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.3182'. [ 304.709933][T12705] loop3: detected capacity change from 0 to 512 [ 304.734137][T12705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 304.766417][T12709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3187'. [ 304.789886][T12705] EXT4-fs (loop3): 1 truncate cleaned up [ 304.791579][T12705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 304.799952][T12705] EXT4-fs (loop3): shut down requested (0) [ 305.023488][T10947] EXT4-fs (loop3): unmounting filesystem. [ 305.091854][T12722] 9pnet_fd: Insufficient options for proto=fd [ 305.152354][T12730] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.3196'. [ 305.307568][T12736] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3199'. [ 305.683109][T12753] 9pnet_fd: Insufficient options for proto=fd [ 305.770426][T12761] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.3210'. [ 306.302339][T12791] netlink: 35347 bytes leftover after parsing attributes in process `syz.4.3225'. [ 306.634641][T12787] loop3: detected capacity change from 0 to 32768 [ 306.642748][T12787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3224 (12787) [ 306.656165][T12787] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.658893][T12787] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 306.665825][T12787] BTRFS info (device loop3): using free space tree [ 306.846437][T12787] BTRFS info (device loop3): enabling ssd optimizations [ 306.881412][T10947] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.039979][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3236'. [ 307.432155][T12857] loop4: detected capacity change from 0 to 1024 [ 307.541732][ T4235] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 307.544170][ T4235] Bluetooth: hci1: Injecting HCI hardware error event [ 307.549145][ T4240] Bluetooth: hci1: hardware error 0x00 [ 307.557063][ T4938] hfsplus: b-tree write err: -5, ino 4 [ 307.897292][T12876] binder: 12875:12876 tried to acquire reference to desc 0, got 1 instead [ 307.908633][ T9856] binder: release 12875:12876 transaction 40 out, still active [ 307.915331][ T9856] binder: undelivered TRANSACTION_COMPLETE [ 307.937850][ T9856] binder: send failed reply for transaction 40, target dead [ 308.483512][T12878] loop4: detected capacity change from 0 to 32768 [ 308.495008][T12878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 308.496970][T12878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 308.523099][T12878] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 2ms [ 308.526371][ T4279] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 308.528170][ T4279] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 308.571930][ T4279] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 308.576302][ T4279] gfs2: fsid=syz:syz.0: jid=0: Done [ 308.579948][T12878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 308.840500][T12878] syz.4.3258 (12878): drop_caches: 2 [ 309.743580][T12935] loop4: detected capacity change from 0 to 32768 [ 309.779937][T12935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3286 (12935) [ 309.788190][T12935] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.796928][T12935] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 309.804862][T12935] BTRFS info (device loop4): using free space tree [ 309.878038][T12939] loop3: detected capacity change from 0 to 40427 [ 309.885819][T12939] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 309.888936][T12939] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 309.899105][T12939] F2FS-fs (loop3): invalid crc value [ 309.948166][T12939] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.979410][ T4240] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 310.041765][T12939] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 310.044730][T12939] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 310.096431][T12935] BTRFS info (device loop4): enabling ssd optimizations [ 310.140236][T12189] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.285975][T12939] syz.3.3287: attempt to access beyond end of device [ 310.285975][T12939] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 310.402192][ T4240] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 310.404341][ T4240] Bluetooth: hci4: Injecting HCI hardware error event [ 310.408400][ T4235] Bluetooth: hci4: hardware error 0x00 [ 310.537196][T10947] syz-executor: attempt to access beyond end of device [ 310.537196][T10947] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 311.245250][T13002] loop4: detected capacity change from 0 to 40427 [ 311.256526][T13002] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 311.261614][T13002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 311.308668][T13002] F2FS-fs (loop4): Found nat_bits in checkpoint [ 311.354011][T13002] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 311.356212][T13002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 311.702066][ T4240] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 311.704744][ T4240] Bluetooth: hci5: Injecting HCI hardware error event [ 311.708669][ T4240] Bluetooth: hci5: hardware error 0x00 [ 311.861635][T13030] loop3: detected capacity change from 0 to 32768 [ 311.961248][T13030] XFS (loop3): Mounting V5 Filesystem [ 312.090190][T13030] XFS (loop3): Ending clean mount [ 312.175853][T10947] XFS (loop3): Unmounting Filesystem [ 312.567478][T13065] loop4: detected capacity change from 0 to 40427 [ 312.582699][T13065] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 312.584673][T13065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 312.680970][T13065] F2FS-fs (loop4): Found nat_bits in checkpoint [ 312.736260][T13065] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 312.738106][T13065] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 312.829620][ T4235] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 312.861545][T13049] syz.1.3327 (13049): drop_caches: 2 [ 313.833888][T13108] loop4: detected capacity change from 0 to 40427 [ 313.848466][T13108] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 313.852338][T13108] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 313.877542][T13108] F2FS-fs (loop4): Found nat_bits in checkpoint [ 313.911968][T13108] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 313.914118][T13108] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 314.129024][ T4240] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 314.891027][T13137] loop4: detected capacity change from 0 to 40427 [ 315.206253][T13122] syz.1.3354 (13122): drop_caches: 2 [ 315.207111][T13137] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 315.210015][T13137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 315.244009][T13137] F2FS-fs (loop4): invalid crc value [ 315.264196][T13145] loop3: detected capacity change from 0 to 40427 [ 315.286748][T13137] F2FS-fs (loop4): Found nat_bits in checkpoint [ 315.305306][T13145] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 315.307296][T13145] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 315.313908][T13159] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 315.340593][T13137] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 315.342434][T13137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 315.387301][T13145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.424787][T13145] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 315.426634][T13145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 316.009986][T13200] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 316.133754][T13206] autofs4:pid:13206:autofs_fill_super: pipe file descriptor does not contain proper ops [ 316.550662][T13228] loop4: detected capacity change from 0 to 64 [ 316.682704][T13235] autofs4:pid:13235:autofs_fill_super: pipe file descriptor does not contain proper ops [ 318.478390][T13236] loop4: detected capacity change from 0 to 32768 [ 318.727930][T13236] XFS (loop4): Mounting V5 Filesystem [ 318.829213][T13236] XFS (loop4): Ending clean mount [ 318.973404][T13295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 319.019170][T12189] XFS (loop4): Unmounting Filesystem [ 319.035864][T13301] libceph: resolve '0.' (ret=-3): failed [ 319.246410][ T2051] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.247915][ T2051] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.442413][T13330] libceph: resolve '0.' (ret=-3): failed [ 320.014938][T13356] libceph: resolve '0.' (ret=-3): failed [ 320.214011][T13367] loop3: detected capacity change from 0 to 512 [ 320.264188][T13367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 320.333030][T13367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3458: bg 0: block 256: padding at end of block bitmap is not set [ 320.345067][T13367] __quota_error: 5 callbacks suppressed [ 320.345083][T13367] Quota error (device loop3): write_blk: dquota write failed [ 320.351458][T13367] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 320.354467][T13367] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 320.356936][T13367] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.3458: Failed to acquire dquot type 1 [ 320.441116][T10947] EXT4-fs (loop3): unmounting filesystem. [ 320.487659][T13393] __nla_validate_parse: 1 callbacks suppressed [ 320.487677][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3470'. [ 320.496796][T13395] loop3: detected capacity change from 0 to 164 [ 320.510468][T13395] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 321.483806][T13410] loop4: detected capacity change from 0 to 2048 [ 321.539756][T13410] NILFS (loop4): couldn't find nilfs on the device [ 321.661655][T13420] loop4: detected capacity change from 0 to 512 [ 321.740893][T13420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.775238][T13420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3480: bg 0: block 256: padding at end of block bitmap is not set [ 321.784103][T13420] Quota error (device loop4): write_blk: dquota write failed [ 321.786053][T13420] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 321.798885][T13420] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 321.801281][T13426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3483'. [ 321.807656][T13420] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.3480: Failed to acquire dquot type 1 [ 321.891884][T13428] loop3: detected capacity change from 0 to 164 [ 322.191811][T13428] rock: directory entry would overflow storage [ 322.193851][T13428] rock: sig=0x4f50, size=4, remaining=3 [ 322.195366][T13428] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 322.583017][T12189] EXT4-fs (loop4): unmounting filesystem. [ 322.630082][T13431] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 322.876840][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3490'. [ 323.159511][T13456] loop3: detected capacity change from 0 to 512 [ 323.198786][T13456] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 323.214776][T13456] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3496: bg 0: block 256: padding at end of block bitmap is not set [ 323.276945][T13456] Quota error (device loop3): write_blk: dquota write failed [ 323.279025][T13456] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 323.281606][T13461] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.294880][T13463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3499'. [ 323.304263][T13456] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 323.473569][T13456] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.3496: Failed to acquire dquot type 1 [ 324.088866][T10947] EXT4-fs (loop3): unmounting filesystem. [ 324.233538][T13473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3502'. [ 324.608210][T13495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3511'. [ 324.647871][T13493] loop4: detected capacity change from 0 to 1024 [ 325.616622][T10905] hfsplus: b-tree write err: -5, ino 4 [ 326.363295][T13518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3518'. [ 326.524037][T13528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3524'. [ 326.653659][T13532] loop4: detected capacity change from 0 to 2048 [ 326.725160][T13532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 327.752030][T12189] EXT4-fs (loop4): unmounting filesystem. [ 330.187808][ T27] audit: type=1326 audit(320.339:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13632 comm="syz.2.3569" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c541e28 code=0x0 [ 331.246129][T13672] Bluetooth: MGMT ver 1.22 [ 331.611810][ T27] audit: type=1326 audit(321.641:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.1.3592" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92141e28 code=0x0 [ 331.729971][T13699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.745511][T13699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.126279][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 332.148455][T13715] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 332.469388][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 332.478241][T13746] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 332.745611][T13763] device bond0 entered promiscuous mode [ 332.747059][T13763] device bond_slave_0 entered promiscuous mode [ 332.748628][T13763] device bond_slave_1 entered promiscuous mode [ 333.366221][T13799] loop3: detected capacity change from 0 to 1024 [ 333.454795][T13799] [ 333.455501][T13799] ====================================================== [ 333.457082][ T4235] Bluetooth: hci3: command 0x0406 tx timeout [ 333.457247][T13799] WARNING: possible circular locking dependency detected [ 333.458900][ T4240] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 333.460616][T13799] 6.1.96-syzkaller #0 Not tainted [ 333.460627][T13799] ------------------------------------------------------ [ 333.460632][T13799] syz.3.3645/13799 is trying to acquire lock: [ 333.460639][T13799] ffff0000d8952d20 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: filemap_fault+0x58c/0xf7c [ 333.469382][T13799] [ 333.469382][T13799] but task is already holding lock: [ 333.471292][T13799] ffff0000da4a6748 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x38/0x2e8 [ 333.473746][T13799] [ 333.473746][T13799] which lock already depends on the new lock. [ 333.473746][T13799] [ 333.476442][T13799] [ 333.476442][T13799] the existing dependency chain (in reverse order) is: [ 333.478841][T13799] [ 333.478841][T13799] -> #3 (&mm->mmap_lock){++++}-{3:3}: [ 333.480856][T13799] __might_fault+0xc4/0x124 [ 333.482154][T13799] filldir64+0x2d4/0x948 [ 333.483320][T13799] hfsplus_readdir+0x398/0xf28 [ 333.484745][T13799] iterate_dir+0x1f4/0x4e4 [ 333.486028][T13799] __arm64_sys_getdents64+0x1c4/0x4a0 [ 333.487544][T13799] invoke_syscall+0x98/0x2c0 [ 333.488957][T13799] el0_svc_common+0x138/0x258 [ 333.490353][T13799] do_el0_svc+0x64/0x218 [ 333.491531][T13799] el0_svc+0x58/0x168 [ 333.492662][T13799] el0t_64_sync_handler+0x84/0xf0 [ 333.494157][T13799] el0t_64_sync+0x18c/0x190 [ 333.495458][T13799] [ 333.495458][T13799] -> #2 (&tree->tree_lock#2){+.+.}-{3:3}: [ 333.497498][T13799] __mutex_lock_common+0x190/0x21a0 [ 333.499018][T13799] mutex_lock_nested+0x38/0x44 [ 333.500367][T13799] hfsplus_file_truncate+0x62c/0x9b8 [ 333.501814][T13799] hfsplus_write_failed+0x88/0xa4 [ 333.503235][T13799] hfsplus_write_begin+0xe0/0xe4 [ 333.504614][T13799] generic_perform_write+0x278/0x55c [ 333.506120][T13799] __generic_file_write_iter+0x168/0x388 [ 333.507701][T13799] generic_file_write_iter+0xb8/0x2b4 [ 333.509208][T13799] vfs_write+0x610/0x914 [ 333.510394][T13799] ksys_write+0x15c/0x26c [ 333.511619][T13799] __arm64_sys_write+0x7c/0x90 [ 333.512984][T13799] invoke_syscall+0x98/0x2c0 [ 333.514297][T13799] el0_svc_common+0x138/0x258 [ 333.515756][T13799] do_el0_svc+0x64/0x218 [ 333.517014][T13799] el0_svc+0x58/0x168 [ 333.518110][T13799] el0t_64_sync_handler+0x84/0xf0 [ 333.519508][T13799] el0t_64_sync+0x18c/0x190 [ 333.520866][T13799] [ 333.520866][T13799] -> #1 (&hip->extents_lock){+.+.}-{3:3}: [ 333.522895][T13799] __mutex_lock_common+0x190/0x21a0 [ 333.524278][T13799] mutex_lock_nested+0x38/0x44 [ 333.525604][T13799] hfsplus_get_block+0x2c4/0x1168 [ 333.527112][T13799] block_read_full_folio+0x2f4/0x98c [ 333.528593][T13799] hfsplus_read_folio+0x28/0x38 [ 333.530009][T13799] read_pages+0x4c0/0x6a0 [ 333.531250][T13799] page_cache_ra_unbounded+0x46c/0x58c [ 333.532755][T13799] page_cache_ra_order+0x850/0xa74 [ 333.534185][T13799] do_sync_mmap_readahead+0x3a4/0x844 [ 333.535696][T13799] filemap_fault+0x604/0xf7c [ 333.536962][T13799] __do_fault+0x11c/0x3d8 [ 333.538272][T13799] handle_mm_fault+0x1820/0x3ef0 [ 333.539650][T13799] do_page_fault+0x330/0x890 [ 333.540942][T13799] do_translation_fault+0x94/0xc8 [ 333.542434][T13799] do_mem_abort+0x74/0x200 [ 333.543611][T13799] el1_abort+0x3c/0x5c [ 333.544772][T13799] el1h_64_sync_handler+0x60/0xac [ 333.546176][T13799] el1h_64_sync+0x64/0x68 [ 333.547396][T13799] __arch_copy_to_user+0xbc/0x234 [ 333.548796][T13799] __arm64_sys_fcntl+0x110/0x1f8 [ 333.550239][T13799] invoke_syscall+0x98/0x2c0 [ 333.551578][T13799] el0_svc_common+0x138/0x258 [ 333.552857][T13799] do_el0_svc+0x64/0x218 [ 333.554118][T13799] el0_svc+0x58/0x168 [ 333.555330][T13799] el0t_64_sync_handler+0x84/0xf0 [ 333.556714][T13799] el0t_64_sync+0x18c/0x190 [ 333.558115][T13799] [ 333.558115][T13799] -> #0 (mapping.invalidate_lock#7){.+.+}-{3:3}: [ 333.560426][T13799] __lock_acquire+0x3338/0x7680 [ 333.561862][T13799] lock_acquire+0x26c/0x7cc [ 333.563228][T13799] down_read+0x64/0x308 [ 333.564419][T13799] filemap_fault+0x58c/0xf7c [ 333.565731][T13799] __do_fault+0x11c/0x3d8 [ 333.567032][T13799] handle_mm_fault+0x1f90/0x3ef0 [ 333.568515][T13799] do_page_fault+0x330/0x890 [ 333.569771][T13799] do_translation_fault+0x94/0xc8 [ 333.571253][T13799] do_mem_abort+0x74/0x200 [ 333.572497][T13799] el1_abort+0x3c/0x5c [ 333.573757][T13799] el1h_64_sync_handler+0x60/0xac [ 333.575250][T13799] el1h_64_sync+0x64/0x68 [ 333.576517][T13799] strncpy_from_user+0x224/0x54c [ 333.577948][T13799] getname_flags+0x104/0x48c [ 333.579339][T13799] getname+0x28/0x38 [ 333.580503][T13799] do_sys_openat2+0xd4/0x3d8 [ 333.581832][T13799] __arm64_sys_openat+0x1f0/0x240 [ 333.583299][T13799] invoke_syscall+0x98/0x2c0 [ 333.584712][T13799] el0_svc_common+0x138/0x258 [ 333.586134][T13799] do_el0_svc+0x64/0x218 [ 333.587418][T13799] el0_svc+0x58/0x168 [ 333.588579][T13799] el0t_64_sync_handler+0x84/0xf0 [ 333.590109][T13799] el0t_64_sync+0x18c/0x190 [ 333.591439][T13799] [ 333.591439][T13799] other info that might help us debug this: [ 333.591439][T13799] [ 333.594135][T13799] Chain exists of: [ 333.594135][T13799] mapping.invalidate_lock#7 --> &tree->tree_lock#2 --> &mm->mmap_lock [ 333.594135][T13799] [ 333.597918][T13799] Possible unsafe locking scenario: [ 333.597918][T13799] [ 333.599900][T13799] CPU0 CPU1 [ 333.601217][T13799] ---- ---- [ 333.602640][T13799] lock(&mm->mmap_lock); [ 333.603807][T13799] lock(&tree->tree_lock#2); [ 333.605653][T13799] lock(&mm->mmap_lock); [ 333.607449][T13799] lock(mapping.invalidate_lock#7); [ 333.608885][T13799] [ 333.608885][T13799] *** DEADLOCK *** [ 333.608885][T13799] [ 333.611035][T13799] 1 lock held by syz.3.3645/13799: [ 333.612319][T13799] #0: ffff0000da4a6748 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x38/0x2e8 [ 333.614938][T13799] [ 333.614938][T13799] stack backtrace: [ 333.616512][T13799] CPU: 0 PID: 13799 Comm: syz.3.3645 Not tainted 6.1.96-syzkaller #0 [ 333.618703][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 333.621296][T13799] Call trace: [ 333.622243][T13799] dump_backtrace+0x1c8/0x1f4 [ 333.623559][T13799] show_stack+0x2c/0x3c [ 333.624694][T13799] dump_stack_lvl+0x108/0x170 [ 333.625999][T13799] dump_stack+0x1c/0x5c [ 333.627120][T13799] print_circular_bug+0x150/0x1b8 [ 333.628417][T13799] check_noncircular+0x2cc/0x378 [ 333.629700][T13799] __lock_acquire+0x3338/0x7680 [ 333.630983][T13799] lock_acquire+0x26c/0x7cc [ 333.632230][T13799] down_read+0x64/0x308 [ 333.633363][T13799] filemap_fault+0x58c/0xf7c [ 333.634568][T13799] __do_fault+0x11c/0x3d8 [ 333.635715][T13799] handle_mm_fault+0x1f90/0x3ef0 [ 333.637035][T13799] do_page_fault+0x330/0x890 [ 333.638233][T13799] do_translation_fault+0x94/0xc8 [ 333.639626][T13799] do_mem_abort+0x74/0x200 [ 333.640855][T13799] el1_abort+0x3c/0x5c [ 333.641959][T13799] el1h_64_sync_handler+0x60/0xac [ 333.643252][T13799] el1h_64_sync+0x64/0x68 [ 333.644351][T13799] strncpy_from_user+0x224/0x54c [ 333.645696][T13799] getname_flags+0x104/0x48c [ 333.646905][T13799] getname+0x28/0x38 [ 333.647969][T13799] do_sys_openat2+0xd4/0x3d8 [ 333.649122][T13799] __arm64_sys_openat+0x1f0/0x240 [ 333.650452][T13799] invoke_syscall+0x98/0x2c0 [ 333.651627][T13799] el0_svc_common+0x138/0x258 [ 333.652804][T13799] do_el0_svc+0x64/0x218 [ 333.653954][T13799] el0_svc+0x58/0x168 [ 333.654997][T13799] el0t_64_sync_handler+0x84/0xf0 [ 333.656330][T13799] el0t_64_sync+0x18c/0x190 [ 333.657525][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.721334][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 335.721910][ T4240] Bluetooth: hci3: Opcode 0x1407 failed: -110