last executing test programs: 5.647961939s ago: executing program 2 (id=2815): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') io_uring_setup(0x16c8a, &(0x7f0000000040)={0x0, 0x0, 0x10}) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.600463747s ago: executing program 4 (id=2816): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES16=r0, @ANYBLOB="000629bd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900008000001e000000"], 0x28}}, 0x4000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r3, 0x4b46, &(0x7f0000000300)) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000200)='./control\x00', 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r5, 0x114, 0x2718, 0x0, 0x20000000) r6 = inotify_init1(0x0) fcntl$setstatus(r6, 0x4, 0x2c00) r7 = gettid() fcntl$setown(r4, 0x8, r7) rt_sigprocmask(0x0, &(0x7f0000000440)={[0xffffdffb]}, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000080)='./control\x00', 0x210000e8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000050005000200000005000400000000000c000780080008400000106d080006400000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) rmdir(&(0x7f0000000100)='./control\x00') setrlimit(0x8, &(0x7f0000000380)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r3, &(0x7f0000000200)) 5.408751689s ago: executing program 4 (id=2819): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, 0x0, 0x0) 5.21470796s ago: executing program 4 (id=2821): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd}) write$snddsp(r2, &(0x7f0000000040)="0010b7bafc1a5dbbe8165e69a428416b71a4e275bc8af7e1fa231f4a491f", 0xffffff81) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180)) 5.134556491s ago: executing program 2 (id=2822): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x543}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 4.867174721s ago: executing program 2 (id=2826): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 4.382235735s ago: executing program 5 (id=2832): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d", 0xc9}], 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 4.293041481s ago: executing program 5 (id=2833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x685, &(0x7f0000000000)=0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='timers\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2d43704e59af3a6289c21c10ed2f67a8126fc34b6f1fc7996e5b4672947f71a908d1783c95f745670dff72c2620ad8c4ac26705cfa5d1e"], 0x5) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 3.831756318s ago: executing program 5 (id=2835): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3.591385484s ago: executing program 3 (id=2838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 3.516863093s ago: executing program 3 (id=2840): shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x1, 0x50, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x7, 0x1b, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) 3.43178868s ago: executing program 3 (id=2841): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0x3}, 0x18) 3.40439727s ago: executing program 0 (id=2842): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = dup(r3) write$FUSE_WRITE(r4, &(0x7f0000000100)={0xfffffeec}, 0xffffffd1) 3.348072268s ago: executing program 3 (id=2843): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000800)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d0800608a37f200587300", @ANYRES8], 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000010c0)={0x0, 0x0, 0x7}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r3 = mq_open(&(0x7f0000001100)='trusted.overlay.redirect\x00', 0x40, 0xa2, &(0x7f0000001140)={0x3e, 0x6, 0x7fff, 0x9}) ioctl$FIOCLEX(r3, 0x5451) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000001180)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000011c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001240)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x100, 0xffffffffffff8001], 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, 0xb8) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000001380)={'TPROXY\x00'}, &(0x7f0000001980)=0x1e) dup3(0xffffffffffffffff, r2, 0x80000) read$char_usb(r3, &(0x7f0000001cc0)=""/107, 0x6b) 3.179376504s ago: executing program 1 (id=2845): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d", 0xc9}], 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 3.127329473s ago: executing program 2 (id=2846): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000200)=0x3e) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r9, 0x0) accept4$vsock_stream(r9, 0x0, 0x0, 0x0) fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x1, 0xfffffffffffffff8) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x14) 3.05634402s ago: executing program 1 (id=2847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfd7, &(0x7f0000001e00)=""/4055}, 0x90) 2.956134222s ago: executing program 1 (id=2848): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)=""/4087, 0xff7}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.837600106s ago: executing program 1 (id=2849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0x37, 0x0, 0x0, @prog_id}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60143, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) listxattr(0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x4000c000) 1.546091656s ago: executing program 0 (id=2850): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r1, 0x504) mkdir(&(0x7f0000000300)='./bus\x00', 0x408) 1.403778381s ago: executing program 4 (id=2851): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x2b0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x84}}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1.382697386s ago: executing program 3 (id=2852): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c000500000008810000000008001b0000000000"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x7, 0x0, 0x1}, {0xac, 0x40, 0x7f}, {0x6}]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) getpriority(0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001140)='net/wireless\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) read$FUSE(r4, &(0x7f0000009980)={0x2020}, 0xfe36) preadv2(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000012400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=r6], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f00000003c0)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x200}, 0x10, 0x0, r5}, 0x90) socket$packet(0x11, 0x3, 0x300) 1.273496055s ago: executing program 2 (id=2853): syz_emit_ethernet(0xb7, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) 1.213660215s ago: executing program 1 (id=2854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000012b40)=@ccm_128={{}, "d36f4e8716b7bcd2", "17ff1ce0d29a3583c79f6ba6adde9121", "684ba5df", "b073c36d7dfb4864"}, 0x28) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x11012, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='smaps\x00') read$FUSE(r2, &(0x7f0000008900)={0x2020}, 0x2020) 1.210746957s ago: executing program 0 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.127394099s ago: executing program 4 (id=2856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 1.081261645s ago: executing program 0 (id=2857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000a6000000ffffff7e9500007b00000000850000007600000095000000000000006ad803edd318bda6b900036a93c9f566bd515c01a276dee5a9a6c2419a10916bdb1e93cdf782db250837504e6739680171eeee5000cebbadd328333f827d69927de070d22be10e74a514547683e856bd281e55c1886d013a9635ea9552f456d0a2d55007194cbf9bec56e7f22a13c5bec46f94fe792853a92d17cd866e06719b13b0e70a63afd10e5e875a5d746a5df9ea8bb634111e199dff536907f3be3f93e3b3e716508e5c198c953355cbb1d534d26d6f1c5b7f9a"], &(0x7f0000000000)='GPL\x00', 0x7, 0x92, &(0x7f0000000040)=""/146}, 0x80) 1.060681311s ago: executing program 4 (id=2858): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$inet6_opts(r0, 0x11a, 0x3, 0x0, &(0x7f0000000000)=0x4) 1.024636046s ago: executing program 2 (id=2859): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, 0x0, &(0x7f0000000200)="4319e2aabc1e4a13e696", 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b68a347c1c43e7920c7f253f428f9879a9c35b520c9cc9e7f7a753a293bb765ce4c47731fadf67da06f3d77e970b15a08dbe9e08e17d5b80a379962e8c5ea6afc978bf144bbfd2c2b88583ca1476deab0cbb505ad621bc8bfe404c8d8b0612c8976af50dd29390d8f3a22f1bdcd0f6e73478cf76e"], 0x10}}, {{&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002a00090000000000000000000400002c450011802f"], 0x5c}, 0x1, 0x3000000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002000)=ANY=[@ANYBLOB=',\x00\x00\x00 \x00\x00\x00\x00\x00~'], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x2}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x41, 0x3, 0x390, 0x0, 0x19, 0x0, 0x260, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1c0, 0x228, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000062213e3826e88aa2aecc35d351fb534b7d59da6ace63ff2835f10ff5f3dbd40311e9fe50aa2d70eea423dcc3b613096bb27307b55ced40fc9845f79d3c2137364d0f03cff9591fdcd04aa253f3c4e40fdf83729ad5f72e513dfed343fb82b9d208e47209acfef94c6f02cda34851ebe7ef94c9130aa1fb1d7a541e90fbd9df7860c2"], &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r6}, 0x20) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x200}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) 830.733747ms ago: executing program 0 (id=2860): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 732.537086ms ago: executing program 5 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3], 0x34}}, 0x0) 605.790808ms ago: executing program 0 (id=2863): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd}) write$snddsp(r2, &(0x7f0000000040)="0010b7bafc1a5dbbe8165e69a428416b71a4e275bc8af7e1fa231f4a491f", 0xffffff81) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180)) 319.338421ms ago: executing program 5 (id=2864): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x2}, 0x0) 178.538913ms ago: executing program 3 (id=2865): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005d40)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x5bdb, &(0x7f00000000c0)="$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") 798.853µs ago: executing program 1 (id=2866): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) 0s ago: executing program 5 (id=2867): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r1, 0x504) mkdir(&(0x7f0000000300)='./bus\x00', 0x408) kernel console output (not intermixed with test programs): id=12416 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 503.366476][ T29] audit: type=1326 audit(1719972033.610:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 503.466069][ T29] audit: type=1326 audit(1719972033.620:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.4.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 503.803701][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.849444][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.004131][T12413] loop2: detected capacity change from 0 to 32768 [ 504.016074][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 504.066465][T12436] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.075286][T12436] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.084215][T12436] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.092963][T12436] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.173219][T12436] vxlan0: entered promiscuous mode [ 504.294455][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.333253][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.586930][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.625759][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.748065][T12445] loop0: detected capacity change from 0 to 4096 [ 504.774270][T12449] Process accounting resumed [ 504.838242][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.890952][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.996400][T12451] loop3: detected capacity change from 0 to 256 [ 505.088633][ T7866] ntfs3: loop0: failed to convert "0000" to iso8859-1 [ 505.111230][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.140802][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.150306][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.168290][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.181727][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 505.182303][ T7866] ntfs3: loop0: failed to convert name for inode 1e. [ 505.195870][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.262558][ T7866] ntfs3: loop0: failed to convert "0000" to iso8859-1 [ 505.319816][ T7866] ntfs3: loop0: failed to convert name for inode 1e. [ 505.331785][T12455] loop4: detected capacity change from 0 to 4096 [ 505.359259][T12455] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 505.383959][ T12] bridge_slave_1: left allmulticast mode [ 505.393590][ T12] bridge_slave_1: left promiscuous mode [ 505.399435][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.420501][T12455] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 505.471564][ T12] bridge_slave_0: left allmulticast mode [ 505.477263][ T12] bridge_slave_0: left promiscuous mode [ 505.509707][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.599074][ T5099] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 505.707099][ T11] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 505.827692][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.854787][ T5099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.886206][ T5099] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 505.917160][ T5099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.945402][ T5099] usb 6-1: config 0 descriptor?? [ 506.267080][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 506.432044][ T5099] hid-rmi 0003:06CB:81A7.000A: unknown main item tag 0x0 [ 506.477305][ T5099] hid-rmi 0003:06CB:81A7.000A: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 506.670767][ T5099] usb 6-1: USB disconnect, device number 8 [ 507.075355][T12473] loop2: detected capacity change from 0 to 32768 [ 507.159739][T12473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2373 (12473) [ 507.239186][T12473] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 507.273858][T12473] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 507.299173][T12473] BTRFS info (device loop2): using free-space-tree [ 507.323516][ T5113] Bluetooth: hci1: command tx timeout [ 507.452622][T12487] loop3: detected capacity change from 0 to 4096 [ 507.490859][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.510442][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.545255][ T12] bond0 (unregistering): Released all slaves [ 507.638133][ T9218] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 507.965183][T10354] ntfs3: loop3: failed to convert "0000" to iso8859-1 [ 508.001767][T10354] ntfs3: loop3: failed to convert name for inode 1e. [ 508.059985][T10354] ntfs3: loop3: failed to convert "0000" to iso8859-1 [ 508.066845][T10354] ntfs3: loop3: failed to convert name for inode 1e. [ 509.046002][ T12] hsr_slave_0: left promiscuous mode [ 509.107236][ T12] hsr_slave_1: left promiscuous mode [ 509.116653][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.136905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.218015][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.237011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.256108][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.267362][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.279677][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.296155][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.319604][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 509.329755][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.354466][ T12] veth1_macvtap: left promiscuous mode [ 509.360108][ T12] veth0_macvtap: left promiscuous mode [ 509.368331][ T12] veth1_vlan: left promiscuous mode [ 509.373963][ T12] veth0_vlan: left promiscuous mode [ 509.390318][ T5113] Bluetooth: hci1: command tx timeout [ 509.715208][ T5099] IPVS: starting estimator thread 0... [ 509.849407][T12529] IPVS: using max 16 ests per chain, 38400 per kthread [ 510.062920][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 510.079512][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 510.096073][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.122151][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.132423][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 510.143550][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.249919][ T53] Bluetooth: hci5: unexpected event 0x04 length: 14 > 10 [ 513.844366][ T5112] Bluetooth: hci1: command tx timeout [ 513.893670][ T5112] Bluetooth: hci3: command tx timeout [ 513.900544][ T5113] Bluetooth: hci5: command 0x0406 tx timeout [ 513.907400][ T53] Bluetooth: hci0: command tx timeout [ 514.292395][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 514.976864][ T12] team0 (unregistering): Port device team_slave_1 removed [ 515.162734][ T12] team0 (unregistering): Port device team_slave_0 removed [ 515.229210][T12566] loop4: detected capacity change from 0 to 64 [ 515.263765][ T29] audit: type=1326 audit(1719972046.380:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 515.319664][ T29] audit: type=1326 audit(1719972046.380:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 515.393774][ T29] audit: type=1326 audit(1719972046.380:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 515.447239][ T29] audit: type=1326 audit(1719972046.380:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 515.515841][ T29] audit: type=1326 audit(1719972046.410:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 515.585117][ T29] audit: type=1326 audit(1719972046.460:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 515.951437][T12549] Bluetooth: hci0: command tx timeout [ 515.957077][T12549] Bluetooth: hci3: command tx timeout [ 515.963284][T12549] Bluetooth: hci1: command tx timeout [ 516.142337][ T29] audit: type=1326 audit(1719972046.460:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe348175b99 code=0x7ffc0000 [ 517.145651][T12457] chnl_net:caif_netlink_parms(): no params data found [ 517.604570][T12457] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.647220][T12457] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.699795][T12457] bridge_slave_0: entered allmulticast mode [ 517.708913][T12457] bridge_slave_0: entered promiscuous mode [ 517.785698][T12457] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.796245][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.828364][ T29] audit: type=1326 audit(1719972048.930:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558e375b99 code=0x7ffc0000 [ 517.859807][T12457] bridge_slave_1: entered allmulticast mode [ 517.869977][T12457] bridge_slave_1: entered promiscuous mode [ 517.882461][T12598] loop4: detected capacity change from 0 to 1024 [ 517.913680][ T29] audit: type=1326 audit(1719972048.930:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558e375b99 code=0x7ffc0000 [ 517.963167][ T29] audit: type=1326 audit(1719972048.940:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f558e375b99 code=0x7ffc0000 [ 518.013621][T12594] loop5: detected capacity change from 0 to 4096 [ 518.029743][T12548] Bluetooth: hci3: command tx timeout [ 518.029757][T12549] Bluetooth: hci0: command tx timeout [ 518.041396][T12594] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 518.087711][T12594] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 518.131456][T12457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.143825][ T2895] hfsplus: b-tree write err: -5, ino 3 [ 518.161839][T10430] hfsplus: node 4:3 still has 1 user(s)! [ 518.193041][T12600] mkiss: ax0: crc mode is auto. [ 518.215568][T12457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.393820][T12610] netlink: 'syz.5.2421': attribute type 1 has an invalid length. [ 518.401912][T12610] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2421'. [ 518.411343][T12610] netlink: 'syz.5.2421': attribute type 1 has an invalid length. [ 518.453358][T12457] team0: Port device team_slave_0 added [ 518.526960][T12457] team0: Port device team_slave_1 added [ 518.626681][T12615] loop4: detected capacity change from 0 to 2048 [ 518.635005][T12615] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 518.655276][T12616] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 518.689528][T12615] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 518.702974][T12615] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 518.710885][T12618] loop5: detected capacity change from 0 to 128 [ 518.730400][T12615] Remounting filesystem read-only [ 518.731262][T12618] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 518.735424][T12615] NILFS (loop4): error -5 truncating bmap (ino=16) [ 518.746606][T12516] chnl_net:caif_netlink_parms(): no params data found [ 518.775497][T12615] ip6t_srh: unknown srh invflags 7401 [ 518.782877][T12618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.840993][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.869848][T10430] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 518.880260][T12457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.887288][T10430] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 518.894739][T12457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.909684][T10430] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 518.926135][T12457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.938468][T10430] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 518.963079][T10430] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 518.976259][T10430] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 519.027946][T12457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.045613][T12457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.119379][T12457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.223708][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.448564][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.559206][T12457] hsr_slave_0: entered promiscuous mode [ 519.566597][T12457] hsr_slave_1: entered promiscuous mode [ 519.579185][T12457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.587308][T12457] Cannot create hsr debugfs directory [ 519.650104][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.675320][T12541] chnl_net:caif_netlink_parms(): no params data found [ 519.679863][T12624] loop4: detected capacity change from 0 to 32768 [ 519.709160][T12624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2426 (12624) [ 519.739537][T12624] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 519.750730][T12624] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 519.760092][T12624] BTRFS info (device loop4): using free-space-tree [ 519.965369][T10430] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 520.115100][T12549] Bluetooth: hci3: command tx timeout [ 520.120617][T12548] Bluetooth: hci0: command tx timeout [ 520.235485][T12516] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.268319][T12516] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.301943][T12660] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 520.303406][T12516] bridge_slave_0: entered allmulticast mode [ 520.310504][T12660] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2432'. [ 520.330353][T12516] bridge_slave_0: entered promiscuous mode [ 520.372526][T12660] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 520.487011][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.503294][T12516] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.516925][T12516] bridge_slave_1: entered allmulticast mode [ 520.538449][T12516] bridge_slave_1: entered promiscuous mode [ 520.811605][T12541] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.834530][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.893777][T12541] bridge_slave_0: entered allmulticast mode [ 521.019936][T12541] bridge_slave_0: entered promiscuous mode [ 521.058431][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 521.215723][T12516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.277485][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.287419][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.298495][T12541] bridge_slave_1: entered allmulticast mode [ 521.307557][T12541] bridge_slave_1: entered promiscuous mode [ 521.329054][ T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 521.349478][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.372514][ T9] usb 6-1: Product: syz [ 521.376699][ T9] usb 6-1: Manufacturer: syz [ 521.391336][ T9] usb 6-1: SerialNumber: syz [ 521.399191][T12516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.414766][ T9] usb 6-1: config 0 descriptor?? [ 521.431559][ T9] ch341 6-1:0.0: ch341-uart converter detected [ 521.821214][T12541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.866910][T12541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.961559][T12516] team0: Port device team_slave_0 added [ 522.035956][ T12] bridge_slave_1: left allmulticast mode [ 522.092995][ T12] bridge_slave_1: left promiscuous mode [ 522.098940][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.139577][ T9] usb 6-1: failed to send control message: -71 [ 522.145970][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 522.168205][ T12] bridge_slave_0: left allmulticast mode [ 522.186918][ T12] bridge_slave_0: left promiscuous mode [ 522.204122][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.208516][ T9] usb 6-1: USB disconnect, device number 9 [ 522.218351][ T9] ch341 6-1:0.0: device disconnected [ 523.554054][T12548] Bluetooth: hci4: command 0x0406 tx timeout [ 523.606373][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.640724][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.668897][ T12] bond0 (unregistering): Released all slaves [ 523.838384][T12516] team0: Port device team_slave_1 added [ 523.928517][T12699] mkiss: ax0: crc mode is auto. [ 524.024431][T12541] team0: Port device team_slave_0 added [ 524.047791][T12541] team0: Port device team_slave_1 added [ 524.180232][T12516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.199553][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.246156][T12516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.495592][T12712] loop2: detected capacity change from 0 to 512 [ 524.521793][T12516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.528801][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.543975][T12714] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 524.557651][T12516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.577790][T12714] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2455'. [ 524.596900][T12712] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.2454: iget: bad extended attribute block 1 [ 524.616608][T12541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.620121][T12714] netlink: 'syz.4.2455': attribute type 1 has an invalid length. [ 524.627542][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.671343][T12712] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2454: couldn't read orphan inode 15 (err -117) [ 524.708584][T12712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.720818][T12541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.750981][T12541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.757958][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.793330][T12712] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 524.827285][T12712] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 13: comm syz.2.2454: lblock 0 mapped to illegal pblock 13 (length 1) [ 524.831067][T12541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.909674][T12712] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.2.2454: error -117 reading directory block [ 524.936021][T12721] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 524.999673][ T12] hsr_slave_0: left promiscuous mode [ 525.017222][ T12] hsr_slave_1: left promiscuous mode [ 525.027131][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.036644][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.037821][ T9218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.062716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.095388][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.143911][ T12] veth1_macvtap: left promiscuous mode [ 525.151292][ T12] veth0_macvtap: left promiscuous mode [ 525.156976][ T12] veth1_vlan: left promiscuous mode [ 525.162832][ T12] veth0_vlan: left promiscuous mode [ 525.852648][T12732] loop2: detected capacity change from 0 to 32768 [ 526.040454][T12732] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 526.062562][T12732] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 526.097127][T12732] bcachefs (loop2): alloc_read... done [ 526.116662][T12732] bcachefs (loop2): stripes_read... done [ 526.126780][T12732] bcachefs (loop2): snapshots_read... done [ 526.140769][T12732] bcachefs (loop2): journal_replay... done [ 526.146657][T12732] bcachefs (loop2): resume_logged_ops... done [ 526.153338][T12732] bcachefs (loop2): going read-write [ 526.164479][T12732] bcachefs (loop2): done starting filesystem [ 526.292549][ T12] team0 (unregistering): Port device team_slave_1 removed [ 526.329406][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 526.329427][ T29] audit: type=1804 audit(1719972057.440:2589): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2462" name="/newroot/219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=1073741829 res=1 errno=0 [ 526.432701][ T12] team0 (unregistering): Port device team_slave_0 removed [ 526.568113][ T9218] bcachefs (loop2): shutting down [ 526.573865][ T9218] bcachefs (loop2): going read-only [ 526.580403][ T9218] bcachefs (loop2): finished waiting for writes to stop [ 526.607695][ T9218] bcachefs (loop2): flushing journal and stopping allocators, journal seq 21 [ 526.656480][ T9218] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 22 [ 526.679204][ T9218] bcachefs (loop2): shutdown complete, journal seq 23 [ 526.698904][ T9218] bcachefs (loop2): marking filesystem clean [ 526.739463][ T9218] bcachefs (loop2): shutdown complete [ 527.533692][T12516] hsr_slave_0: entered promiscuous mode [ 527.561660][T12516] hsr_slave_1: entered promiscuous mode [ 527.578975][T12516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.592935][T12516] Cannot create hsr debugfs directory [ 527.637305][T12541] hsr_slave_0: entered promiscuous mode [ 527.660020][T12541] hsr_slave_1: entered promiscuous mode [ 527.667026][T12541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.678495][T12541] Cannot create hsr debugfs directory [ 527.750434][T12747] loop4: detected capacity change from 0 to 2048 [ 527.769960][T12747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.805924][T12749] netlink: 'syz.5.2465': attribute type 1 has an invalid length. [ 527.846056][T12749] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2465'. [ 527.856625][T12749] netlink: 'syz.5.2465': attribute type 1 has an invalid length. [ 528.165334][T12753] loop4: detected capacity change from 0 to 128 [ 528.174516][T12457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.184283][T12753] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 528.261963][T12753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.288113][T12757] loop5: detected capacity change from 0 to 16 [ 528.297823][T12757] erofs: (device loop5): mounted with root inode @ nid 36. [ 528.302946][T12457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.343506][T12457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.476998][T12457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.629851][T12765] loop2: detected capacity change from 0 to 128 [ 528.718351][T12770] loop5: detected capacity change from 0 to 512 [ 528.724219][T12765] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 528.750788][T12765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.774947][T12541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.812195][T12770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.840044][T12770] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.865479][T12771] loop4: detected capacity change from 0 to 4096 [ 528.893604][ T12] IPVS: stop unused estimator thread 0... [ 529.058171][T12541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.083826][T10003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.145406][ T29] audit: type=1800 audit(1719972060.250:2590): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2474" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 529.281640][T12541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.379617][ T5296] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 529.415805][T12784] loop5: detected capacity change from 0 to 1024 [ 529.581897][ T5296] usb 3-1: config 0 has no interfaces? [ 529.596411][ T5296] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 529.619426][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.654998][T12541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.668291][ T61] hfsplus: b-tree write err: -5, ino 3 [ 529.680455][ T5296] usb 3-1: config 0 descriptor?? [ 529.726058][T10003] hfsplus: node 4:3 still has 1 user(s)! [ 529.762125][T12457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.856970][T12457] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.905591][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.912819][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.028683][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.035917][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.189091][T12541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.364086][T12541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.414641][ T5296] usb 3-1: USB disconnect, device number 8 [ 530.485185][T12541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.517818][T12541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.935564][T12541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.029165][T12541] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.131646][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.138814][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.192524][ T2524] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.199746][ T2524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.353958][T12516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.449107][T12516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.506916][T12457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.555480][T12516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 531.622135][T12516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.696804][T12821] loop4: detected capacity change from 0 to 1024 [ 532.135386][ T11] hfsplus: b-tree write err: -5, ino 4 [ 532.311678][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 532.325828][T12457] veth0_vlan: entered promiscuous mode [ 532.398229][T12457] veth1_vlan: entered promiscuous mode [ 532.485518][T12835] loop4: detected capacity change from 0 to 128 [ 532.556727][T12835] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 532.562087][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 532.579247][T12541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.591775][T12835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.632950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.654444][T12457] veth0_macvtap: entered promiscuous mode [ 532.660942][ T9] usb 3-1: Product: syz [ 532.671592][ T9] usb 3-1: Manufacturer: syz [ 532.686468][ T9] usb 3-1: SerialNumber: syz [ 532.707470][ T9] usb 3-1: config 0 descriptor?? [ 532.738711][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 532.771666][T12457] veth1_macvtap: entered promiscuous mode [ 532.911860][T12841] loop4: detected capacity change from 0 to 764 [ 532.971667][T12841] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 532.997656][T12516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.119673][T12541] veth0_vlan: entered promiscuous mode [ 533.221375][T12541] veth1_vlan: entered promiscuous mode [ 533.302440][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.330007][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.368712][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.422651][T12848] loop5: detected capacity change from 0 to 1024 [ 534.175207][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.218590][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.262326][ T9] usb 3-1: failed to send control message: -110 [ 534.268751][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 534.285627][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.305645][ T9] usb 3-1: USB disconnect, device number 9 [ 534.314230][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.320843][ T9] ch341 3-1:0.0: device disconnected [ 534.344139][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.376593][ T2835] hfsplus: b-tree write err: -5, ino 4 [ 534.377838][T12457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.421686][T12516] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.442793][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.460853][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.496567][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.515789][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.534636][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.567340][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.586161][T12457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.606009][T12457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.634579][T12855] loop4: detected capacity change from 0 to 1024 [ 534.642569][T12457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.664452][T12457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.677894][T12457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.688193][T12457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.697866][T12457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.731953][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.739153][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.816981][ T11] hfsplus: b-tree write err: -5, ino 4 [ 534.821281][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.829687][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.865848][T12859] loop5: detected capacity change from 0 to 2048 [ 534.895333][T12859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.954314][T12861] loop4: detected capacity change from 0 to 256 [ 534.978866][T12861] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 535.006908][T12541] veth0_macvtap: entered promiscuous mode [ 535.048999][T12541] veth1_macvtap: entered promiscuous mode [ 535.195131][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.212652][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.223983][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.259459][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.279600][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.303221][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.317237][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.328434][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.349467][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.379314][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.394963][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.410164][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.423767][T12541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.490575][T12873] loop5: detected capacity change from 0 to 128 [ 535.514611][T12873] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 535.541621][T12873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.552415][T12516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.612873][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.648556][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.667935][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.690126][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.704613][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.737573][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.754467][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.769649][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.785572][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.802189][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.815339][T12541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.856577][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.863672][T12541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.898824][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.919890][T12541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.950843][T12541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.975883][T12890] loop4: detected capacity change from 0 to 64 [ 536.002012][T12541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.029201][T12890] MINIX-fs: bad superblock [ 536.417420][T12900] Option ' ' to dns_resolver key: bad/missing value [ 537.911669][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.920044][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.139646][ T5160] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 538.170328][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.184451][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.202504][T12516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.272283][T12912] fuse: Unknown parameter '·' [ 538.407950][ T5160] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 538.418180][ T5160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.465625][ T5160] usb 3-1: Product: syz [ 538.483361][ T5160] usb 3-1: Manufacturer: syz [ 538.488237][ T5160] usb 3-1: SerialNumber: syz [ 538.632470][ T5160] usb 3-1: config 0 descriptor?? [ 539.179749][ T5160] usb 3-1: can't set config #0, error -71 [ 539.236726][ T5160] usb 3-1: USB disconnect, device number 10 [ 539.236777][T12516] veth0_vlan: entered promiscuous mode [ 539.252380][T12920] loop1: detected capacity change from 0 to 128 [ 539.311549][T12920] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 539.366514][T12516] veth1_vlan: entered promiscuous mode [ 539.411634][T12920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.461098][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 539.485964][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 539.609731][T12516] veth0_macvtap: entered promiscuous mode [ 539.652645][T12516] veth1_macvtap: entered promiscuous mode [ 539.695530][T12936] loop2: detected capacity change from 0 to 16 [ 539.730800][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.747883][T12936] erofs: (device loop2): mounted with root inode @ nid 36. [ 539.762880][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.776931][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.818681][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.829665][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.840168][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.850562][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.862304][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.874241][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.886903][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.903816][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.915419][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.953059][T12516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.203443][ T5292] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 540.652495][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.668889][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.696916][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.699307][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.721928][ T5292] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 540.731049][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.761899][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.798826][ T5292] usb 2-1: config 0 descriptor?? [ 540.817614][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.847035][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.859164][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.921604][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.968137][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.007388][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.071479][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.211910][T12516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.723444][ T5292] hid (null): bogus close delimiter [ 541.729350][T12516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.764388][T12516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.426892][T12959] fuse: Unknown parameter '·' [ 542.439400][ T5292] usb 2-1: language id specifier not provided by device, defaulting to English [ 542.453276][T12516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.469345][T12516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.476186][T12967] loop5: detected capacity change from 0 to 764 [ 542.481407][T12516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.503831][T12967] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 542.518900][T12516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.414208][T12947] loop1: detected capacity change from 0 to 256 [ 544.165760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.329490][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.656139][ T5292] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input11 [ 544.740248][T12986] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2544'. [ 544.749965][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 544.758874][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 544.766903][T12987] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 544.826051][ T5292] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input12 [ 544.830823][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.871931][T12987] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 544.913865][ T5292] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input13 [ 544.929860][T12987] Error parsing options; rc = [-22] [ 544.947168][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.025186][T12993] loop5: detected capacity change from 0 to 512 [ 545.034745][T12995] loop4: detected capacity change from 0 to 256 [ 545.042094][ T5292] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000B/input/input14 [ 545.075672][T12995] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 545.137529][T12993] EXT4-fs error (device loop5): ext4_orphan_get:1394: inode #15: comm syz.5.2548: iget: bad extended attribute block 1 [ 545.171631][ T5292] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 545.207843][T12991] loop1: detected capacity change from 0 to 4096 [ 545.233066][T12993] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.2548: couldn't read orphan inode 15 (err -117) [ 545.255848][T12991] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 545.279620][ T5292] usb 2-1: USB disconnect, device number 7 [ 545.322183][T12993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.350632][T13007] loop3: detected capacity change from 0 to 512 [ 545.399820][T12991] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 545.416587][T13007] EXT4-fs (loop3): 1 truncate cleaned up [ 545.461567][T13007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.487349][T13012] loop4: detected capacity change from 0 to 764 [ 545.496371][T13012] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 545.530951][T13013] EXT4-fs error (device loop5): ext4_map_blocks:580: inode #2: block 13: comm syz.5.2548: lblock 0 mapped to illegal pblock 13 (length 1) [ 545.554980][T13013] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.5.2548: error -117 reading directory block [ 545.559360][T12993] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 545.743608][ T29] audit: type=1800 audit(1719972076.860:2591): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2553" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 545.805579][T13018] Bluetooth: MGMT ver 1.22 [ 545.849096][T13015] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 545.859757][T13018] Bluetooth: hci3: invalid length 3, exp 2 for type 16 [ 546.603082][T12541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.635272][T13021] fuse: Unknown parameter '·' [ 546.689150][T10003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.818351][T13027] loop0: detected capacity change from 0 to 1024 [ 546.918213][T13034] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2560'. [ 547.107955][T13043] loop3: detected capacity change from 0 to 256 [ 547.158284][T13043] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 548.405490][T13056] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2572'. [ 548.418601][T13056] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2572'. [ 548.872567][T13069] loop3: detected capacity change from 0 to 4096 [ 548.899305][T13069] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 549.027350][T13069] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 551.315323][T13110] loop1: detected capacity change from 0 to 32768 [ 551.482789][T13110] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 551.494450][T13110] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 551.537697][T13110] bcachefs (loop1): alloc_read... done [ 551.553224][T13110] bcachefs (loop1): stripes_read... done [ 551.558912][T13110] bcachefs (loop1): snapshots_read... done [ 551.571364][T13110] bcachefs (loop1): journal_replay... done [ 551.577301][T13110] bcachefs (loop1): resume_logged_ops... done [ 551.583933][T13110] bcachefs (loop1): going read-write [ 551.622518][T13110] bcachefs (loop1): done starting filesystem [ 551.816155][T12457] bcachefs (loop1): shutting down [ 551.835791][T12457] bcachefs (loop1): going read-only [ 551.849741][T12457] bcachefs (loop1): finished waiting for writes to stop [ 551.866314][T12457] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9 [ 551.909740][T12457] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 551.946896][T12457] bcachefs (loop1): shutdown complete, journal seq 11 [ 551.955548][T12457] bcachefs (loop1): marking filesystem clean [ 552.008833][T12457] bcachefs (loop1): shutdown complete [ 554.272701][T13145] loop1: detected capacity change from 0 to 1024 [ 554.282007][T13145] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 554.282007][T13145] [ 554.688349][T13058] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 554.697481][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 554.756794][ T2524] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 554.949901][ T2524] usb 2-1: Using ep0 maxpacket: 8 [ 554.958962][T13158] loop3: detected capacity change from 0 to 512 [ 554.994173][ T2524] usb 2-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice=51.2c [ 555.007790][T13156] loop5: detected capacity change from 0 to 64 [ 555.023517][ T2524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.057909][ T2524] usb 2-1: config 0 descriptor?? [ 555.067270][T13156] MINIX-fs: bad superblock [ 555.090885][T13158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.219605][T13158] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.263606][T13158] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.2591: path /18/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 555.330973][T13158] EXT4-fs (loop3): Remounting filesystem read-only [ 555.372767][ T2524] usb 2-1: USB disconnect, device number 8 [ 555.524221][T12541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.929086][T13190] loop0: detected capacity change from 0 to 1024 [ 555.963656][T13190] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 555.963656][T13190] [ 555.994032][T13193] loop4: detected capacity change from 0 to 512 [ 556.019158][T13193] EXT4-fs (loop4): 1 truncate cleaned up [ 556.031480][T13193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.139528][ T5099] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 556.157787][ T29] audit: type=1800 audit(1719972087.270:2592): pid=13193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2601" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 556.301610][T10430] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.347809][T13205] loop1: detected capacity change from 0 to 2048 [ 556.381271][ T5099] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 556.403403][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.421341][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.448544][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.468674][T13210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.493647][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.508932][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.521132][T13205] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 556.522885][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.545144][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.554883][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.593988][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.620780][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.646176][T13205] Remounting filesystem read-only [ 556.652203][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.663714][T13205] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 556.711774][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.720509][T13205] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 556.751366][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.767403][T13205] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 556.771270][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.829175][T13205] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 556.831474][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.854416][T13205] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 556.881159][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.895379][ T29] audit: type=1800 audit(1719972088.010:2593): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2607" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 556.961639][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.989342][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.008097][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.044486][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.070134][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.088495][ T5099] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.110331][ T5099] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.129346][ T5099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 557.149172][ T5099] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 557.186013][ T5099] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 557.224970][ T5099] usb 4-1: Product: syz [ 557.241412][ T5099] usb 4-1: Manufacturer: syz [ 557.251436][T13234] loop4: detected capacity change from 0 to 64 [ 557.266574][ T5099] usb 4-1: SerialNumber: syz [ 557.271296][T13234] MINIX-fs: bad superblock [ 557.530213][ T5099] usb 4-1: config 0 descriptor?? [ 557.793051][ T5099] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 557.957196][ T5099] usb 4-1: USB disconnect, device number 12 [ 558.209454][ T5099] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 558.518396][T13241] loop5: detected capacity change from 0 to 1024 [ 558.546896][T13241] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 558.546896][T13241] [ 558.648831][T13247] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 559.222479][ T29] audit: type=1326 audit(1719972090.340:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.3.2627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabcf575b99 code=0x0 [ 560.305514][T13283] ubi1: attaching mtd0 [ 560.406447][T13287] loop3: detected capacity change from 0 to 512 [ 560.447854][T13287] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 560.513011][T13287] EXT4-fs (loop3): invalid journal inode [ 560.559703][T13287] EXT4-fs (loop3): can't get journal size [ 560.653170][T13287] EXT4-fs (loop3): 1 truncate cleaned up [ 560.739637][ T780] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 560.772747][T13287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.088404][ T780] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 561.400211][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 561.567027][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 561.622725][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.637261][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 561.652430][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 561.664203][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.722610][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 561.735339][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 561.754692][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.764766][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 561.778697][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 561.811304][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.822117][T12541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.850545][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 561.895715][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 561.959704][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 561.994110][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.010296][ T29] audit: type=1326 audit(1719972093.100:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13307 comm="syz.5.2644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e6d775b99 code=0x0 [ 562.043681][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.063923][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.102511][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.151937][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.167412][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.178918][ T780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 562.195876][ T780] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 562.207481][ T780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.222172][ T780] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 562.231790][ T780] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 562.240625][ T780] usb 2-1: Product: syz [ 562.244972][ T780] usb 2-1: Manufacturer: syz [ 562.256393][ T780] usb 2-1: SerialNumber: syz [ 562.285677][ T780] usb 2-1: config 0 descriptor?? [ 562.314847][ T780] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 562.441075][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.447428][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.566590][ T45] usb 2-1: USB disconnect, device number 9 [ 562.612491][ T45] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 564.507331][T12549] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 568.299795][T12549] Bluetooth: hci2: command 0x0406 tx timeout [ 569.114367][T13340] loop5: detected capacity change from 0 to 512 [ 569.238260][T13340] EXT4-fs error (device loop5): ext4_orphan_get:1394: inode #15: comm syz.5.2655: casefold flag without casefold feature [ 569.288073][T13340] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.2655: couldn't read orphan inode 15 (err -117) [ 569.351345][T13340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.358674][T12548] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.379529][T12548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.395694][T12548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.406155][T12548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.440669][T12548] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 569.454626][T12548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.541296][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 569.569956][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 569.582207][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 569.589824][T13340] loop5: detected capacity change from 512 to 64 [ 569.617692][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 569.625014][T13356] EXT4-fs warning (device loop5): ext4_add_entry:2433: inode #2: lblock 0: comm syz.5.2655: error -12 reading directory block [ 569.625757][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 569.646374][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 569.735405][T10003] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 569.770941][T10003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.990338][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 570.190319][ T25] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 570.211458][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.228126][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.249419][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.264280][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.281955][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.301126][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.311675][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.332365][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.343524][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.386543][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.409816][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.421074][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.446393][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.464945][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.478233][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.504306][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.536293][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.547450][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.555500][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.564651][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.575725][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.583789][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 570.596667][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 570.607717][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.622403][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 570.631684][ T25] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 570.642625][ T25] usb 5-1: Product: syz [ 570.646805][ T25] usb 5-1: Manufacturer: syz [ 570.651959][ T25] usb 5-1: SerialNumber: syz [ 570.659624][ T25] usb 5-1: config 0 descriptor?? [ 570.673425][ T25] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 571.071965][ T5292] usb 5-1: USB disconnect, device number 8 [ 571.096154][ T5292] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 571.562752][ T53] Bluetooth: hci6: command tx timeout [ 571.712585][ T53] Bluetooth: hci7: command tx timeout [ 572.304398][T13217] bridge0: port 3(syz_tun) entered disabled state [ 572.387579][T13217] syz_tun (unregistering): left allmulticast mode [ 572.406283][T13217] syz_tun (unregistering): left promiscuous mode [ 572.413026][T13217] bridge0: port 3(syz_tun) entered disabled state [ 572.795318][T13054] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.816543][T13378] loop4: detected capacity change from 0 to 512 [ 572.891121][T13378] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.2670: casefold flag without casefold feature [ 573.014820][T13378] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2670: couldn't read orphan inode 15 (err -117) [ 573.065542][T13378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.132771][T13054] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.216535][T12549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.226328][T13374] loop1: detected capacity change from 0 to 32768 [ 573.229402][T13378] loop4: detected capacity change from 512 to 64 [ 573.236282][T12549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.255143][T12549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.264220][T12549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.275718][T12549] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 573.283712][T12549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.296095][T13374] diRead: diIAGRead returned -5 [ 573.307243][T13387] EXT4-fs warning (device loop4): ext4_add_entry:2433: inode #2: lblock 0: comm syz.4.2670: error -12 reading directory block [ 573.358892][T13054] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.438118][T10430] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 573.507363][T10430] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.564173][T13054] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.633293][T12549] Bluetooth: hci6: command tx timeout [ 573.770874][T13391] loop1: detected capacity change from 0 to 64 [ 573.789436][T12549] Bluetooth: hci7: command tx timeout [ 574.065284][T13347] chnl_net:caif_netlink_parms(): no params data found [ 574.067189][T13400] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 574.512928][T13353] chnl_net:caif_netlink_parms(): no params data found [ 574.601155][T13054] bridge_slave_1: left allmulticast mode [ 574.619280][T13054] bridge_slave_1: left promiscuous mode [ 574.625015][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.655395][T13054] bridge_slave_0: left allmulticast mode [ 574.669310][T13054] bridge_slave_0: left promiscuous mode [ 574.675092][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.311417][T12549] Bluetooth: hci0: command tx timeout [ 575.550723][T13418] program syz.3.2683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.569160][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.582468][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.592812][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.605017][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.616103][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 575.624313][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.717297][ T53] Bluetooth: hci6: command tx timeout [ 575.721273][T13424] loop1: detected capacity change from 0 to 64 [ 575.870663][ T53] Bluetooth: hci7: command tx timeout [ 576.509809][T13054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.525975][T13054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.538881][T13054] bond0 (unregistering): Released all slaves [ 576.677373][T13454] program syz.1.2694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.989735][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.996924][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.019586][T13347] bridge_slave_0: entered allmulticast mode [ 577.027317][T13347] bridge_slave_0: entered promiscuous mode [ 577.037176][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.044750][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.052255][T13347] bridge_slave_1: entered allmulticast mode [ 577.065057][T13347] bridge_slave_1: entered promiscuous mode [ 577.302795][T13458] loop1: detected capacity change from 0 to 32768 [ 577.313783][T13458] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2695 (13458) [ 577.343300][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.359785][T13353] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.367002][T13458] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 577.367234][T13353] bridge_slave_0: entered allmulticast mode [ 577.390885][ T53] Bluetooth: hci0: command tx timeout [ 577.396533][T13458] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 577.406963][T13353] bridge_slave_0: entered promiscuous mode [ 577.416199][T13458] BTRFS info (device loop1): using free-space-tree [ 577.462511][T13470] raw_sendmsg: syz.3.2698 forgot to set AF_INET. Fix it! [ 577.538960][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.563507][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.604411][T13458] BTRFS info (device loop1): rebuilding free space tree [ 577.645364][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.670781][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.689564][T13353] bridge_slave_1: entered allmulticast mode [ 577.709545][ T53] Bluetooth: hci2: command tx timeout [ 577.718952][T13353] bridge_slave_1: entered promiscuous mode [ 577.790309][ T53] Bluetooth: hci6: command tx timeout [ 577.828047][T13384] chnl_net:caif_netlink_parms(): no params data found [ 577.888498][ T29] audit: type=1800 audit(1719972109.000:2596): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2695" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 577.934379][ T29] audit: type=1800 audit(1719972109.000:2597): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2695" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 577.955297][ T53] Bluetooth: hci7: command tx timeout [ 578.194171][T13054] hsr_slave_0: left promiscuous mode [ 578.200235][T13054] hsr_slave_1: left promiscuous mode [ 578.227986][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.259556][T13054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.312903][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.324847][T13054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.378364][T12457] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 578.451661][T13054] veth1_macvtap: left promiscuous mode [ 578.481687][T13054] veth0_macvtap: left promiscuous mode [ 578.487491][T13054] veth1_vlan: left promiscuous mode [ 578.493822][T13054] veth0_vlan: left promiscuous mode [ 579.469733][ T53] Bluetooth: hci0: command tx timeout [ 579.798453][ T53] Bluetooth: hci2: command tx timeout [ 580.073078][T13054] team0 (unregistering): Port device team_slave_1 removed [ 580.137637][T13054] team0 (unregistering): Port device team_slave_0 removed [ 580.791995][T13353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.804388][T13353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.825832][T13347] team0: Port device team_slave_0 added [ 580.888755][T13498] tap0: tun_chr_ioctl cmd 1074025678 [ 580.899357][T13498] tap0: group set to 0 [ 580.957838][T13347] team0: Port device team_slave_1 added [ 581.058471][T13353] team0: Port device team_slave_0 added [ 581.112138][T13353] team0: Port device team_slave_1 added [ 581.151452][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.175118][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.292318][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.411307][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.418292][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.580133][ T53] Bluetooth: hci0: command tx timeout [ 583.252162][ T53] Bluetooth: hci2: command tx timeout [ 583.347902][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.595391][T13514] veth0_vlan: entered allmulticast mode [ 583.683154][T13516] ªªªªªªÿÿ: renamed from vlan0 [ 583.724504][T13384] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.733025][T13384] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.759726][T13384] bridge_slave_0: entered allmulticast mode [ 583.768410][T13384] bridge_slave_0: entered promiscuous mode [ 583.882335][T13384] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.899661][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.906904][T13384] bridge_slave_1: entered allmulticast mode [ 583.939511][T13384] bridge_slave_1: entered promiscuous mode [ 583.958760][T13353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.975924][T13522] loop3: detected capacity change from 0 to 4096 [ 583.975948][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.021922][T13353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.068927][T13347] hsr_slave_0: entered promiscuous mode [ 584.090932][T13347] hsr_slave_1: entered promiscuous mode [ 584.097485][T13347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.105757][T13347] Cannot create hsr debugfs directory [ 584.279863][T13353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.287180][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.313274][T13353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.322560][T13531] loop3: detected capacity change from 0 to 64 [ 584.394125][T13384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.415275][T13384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.607074][T13353] hsr_slave_0: entered promiscuous mode [ 584.630006][T13353] hsr_slave_1: entered promiscuous mode [ 584.667148][T13353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.675163][T13353] Cannot create hsr debugfs directory [ 584.697685][T13536] tap0: tun_chr_ioctl cmd 1074025678 [ 584.709508][T13536] tap0: group set to 0 [ 585.246020][T13384] team0: Port device team_slave_0 added [ 585.274708][T13419] chnl_net:caif_netlink_parms(): no params data found [ 585.309758][T12549] Bluetooth: hci2: command tx timeout [ 585.433046][T13384] team0: Port device team_slave_1 added [ 585.646693][T13543] loop1: detected capacity change from 0 to 256 [ 585.660683][T13384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.671228][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.699952][T13384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.000151][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 586.413739][T13384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.421063][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.454261][T13384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.797177][T13054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.809550][T13054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.864782][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.884282][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.904207][T13419] bridge_slave_0: entered allmulticast mode [ 586.931162][T13419] bridge_slave_0: entered promiscuous mode [ 586.976305][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.005369][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.022688][T13419] bridge_slave_1: entered allmulticast mode [ 587.031511][T13419] bridge_slave_1: entered promiscuous mode [ 587.195240][T13054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.216371][T13054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.494876][T13054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.507330][T13054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.774644][T13572] loop3: detected capacity change from 0 to 256 [ 587.798383][T13353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.838313][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 587.870823][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.902726][T13054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.913573][T13054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.948665][T13384] hsr_slave_0: entered promiscuous mode [ 587.956532][T13384] hsr_slave_1: entered promiscuous mode [ 587.971308][T13384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.978999][T13384] Cannot create hsr debugfs directory [ 587.988708][T13573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.114042][T13353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.139957][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.291394][T13353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.406509][T13419] team0: Port device team_slave_0 added [ 588.446012][T13419] team0: Port device team_slave_1 added [ 588.538411][T13353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.825463][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.858288][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.888924][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.902694][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.909853][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.936767][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.990031][T13347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.116648][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 589.184553][T13347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.216459][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2734'. [ 589.283349][T13347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.380738][T13419] hsr_slave_0: entered promiscuous mode [ 589.395236][T13419] hsr_slave_1: entered promiscuous mode [ 589.414493][T13419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.431916][T13419] Cannot create hsr debugfs directory [ 589.545573][T13347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.645717][T13610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.894773][T13054] bridge_slave_1: left allmulticast mode [ 589.909419][T13054] bridge_slave_1: left promiscuous mode [ 589.917678][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.945928][T13054] bridge_slave_0: left allmulticast mode [ 589.960804][T13054] bridge_slave_0: left promiscuous mode [ 589.970934][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.022387][T13054] bridge_slave_1: left allmulticast mode [ 590.039379][T13054] bridge_slave_1: left promiscuous mode [ 590.045451][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.074726][T13054] bridge_slave_0: left allmulticast mode [ 590.089698][T13054] bridge_slave_0: left promiscuous mode [ 590.099596][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.128277][T13054] bridge_slave_1: left allmulticast mode [ 590.135217][T13054] bridge_slave_1: left promiscuous mode [ 590.153660][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.210556][T13054] bridge_slave_0: left allmulticast mode [ 590.241894][T13054] bridge_slave_0: left promiscuous mode [ 590.247715][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.449291][T13621] loop1: detected capacity change from 0 to 2048 [ 590.451807][T13615] loop3: detected capacity change from 0 to 32768 [ 590.517369][T13621] Alternate GPT is invalid, using primary GPT. [ 590.540226][T13621] loop1: p1 p2 p3 [ 591.408284][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 592.248710][T13054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.260928][T13054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.272639][T13054] bond0 (unregistering): Released all slaves [ 592.428699][T13054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.448580][T13054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.460356][T13054] bond0 (unregistering): Released all slaves [ 592.616947][T13054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.637936][T13054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.649489][T13054] bond0 (unregistering): Released all slaves [ 592.737272][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2744'. [ 592.856301][T13632] loop3: detected capacity change from 0 to 256 [ 592.954927][T13353] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 592.968318][T13634] loop1: detected capacity change from 0 to 2048 [ 593.013058][T13634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.106152][T13353] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 593.128760][T13353] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 593.375906][T13353] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 593.407251][T13643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.802744][T13653] loop3: detected capacity change from 0 to 512 [ 594.027639][T13650] loop1: detected capacity change from 0 to 2048 [ 594.074651][T13650] Alternate GPT is invalid, using primary GPT. [ 594.087365][T13650] loop1: p1 p2 p3 [ 594.782478][T13384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 594.842607][T13353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.880835][T13658] loop3: detected capacity change from 0 to 256 [ 594.981968][T13384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.016653][T13384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 595.101163][T13384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.127832][T13662] loop3: detected capacity change from 0 to 1024 [ 595.140989][T13663] loop1: detected capacity change from 0 to 8 [ 595.190524][T13662] EXT4-fs: Ignoring removed orlov option [ 595.196274][T13662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.216245][T13663] SQUASHFS error: Failed to read block 0x4e8: -5 [ 595.249734][T13662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.272106][ T29] audit: type=1800 audit(1719972126.390:2598): pid=13663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2756" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 595.505377][T12541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.565579][T13054] hsr_slave_0: left promiscuous mode [ 595.590335][T13054] hsr_slave_1: left promiscuous mode [ 595.598748][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.606765][T13054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.640589][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.648043][T13054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.708638][T13054] hsr_slave_0: left promiscuous mode [ 595.732110][T13054] hsr_slave_1: left promiscuous mode [ 595.755647][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.770992][T13054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.813056][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.831635][T13054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.868101][T13054] hsr_slave_0: left promiscuous mode [ 595.881335][T13054] hsr_slave_1: left promiscuous mode [ 595.887582][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.898142][T13054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.908391][T13054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.927814][T13054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.027238][T13054] veth1_macvtap: left promiscuous mode [ 596.039359][T13054] veth0_macvtap: left promiscuous mode [ 596.045063][T13054] veth1_vlan: left promiscuous mode [ 596.052969][T13054] veth0_vlan: left promiscuous mode [ 596.070586][T13054] veth1_macvtap: left promiscuous mode [ 596.076145][T13054] veth0_macvtap: left promiscuous mode [ 596.089638][T13054] veth1_vlan: left promiscuous mode [ 596.097870][T13054] veth0_vlan: left promiscuous mode [ 596.108362][T13054] veth1_macvtap: left promiscuous mode [ 596.117123][T13054] veth0_macvtap: left promiscuous mode [ 596.133389][T13054] veth1_vlan: left promiscuous mode [ 596.138728][T13054] veth0_vlan: left promiscuous mode [ 596.169007][T13675] loop1: detected capacity change from 0 to 8 [ 596.339854][T13675] loop1: detected capacity change from 0 to 2048 [ 596.375112][T13675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.408796][ T29] audit: type=1800 audit(1719972127.520:2599): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2761" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 596.500419][T13675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.816808][T13678] loop1: detected capacity change from 0 to 512 [ 597.598905][T13054] team0 (unregistering): Port device team_slave_1 removed [ 597.713400][T13054] team0 (unregistering): Port device team_slave_0 removed [ 599.047781][T13054] team0 (unregistering): Port device team_slave_1 removed [ 599.171246][T13054] team0 (unregistering): Port device team_slave_0 removed [ 600.486681][T13054] team0 (unregistering): Port device team_slave_1 removed [ 600.548838][T13054] team0 (unregistering): Port device team_slave_0 removed [ 601.131763][T13353] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.162202][T13671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.196805][T13682] netlink: 'syz.1.2763': attribute type 27 has an invalid length. [ 601.217674][T13347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 601.272221][T13347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 601.358554][T13687] loop1: detected capacity change from 0 to 256 [ 601.395135][T13347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 601.447309][T13347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 601.481123][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.488310][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.571707][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.578897][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.635102][T13691] loop1: detected capacity change from 0 to 8 [ 601.978504][T13700] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 602.028083][T13700] netlink: 'syz.3.2770': attribute type 2 has an invalid length. [ 602.108273][T13384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.153250][T13353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.254068][T13705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.324297][T13384] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.413453][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.420695][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.622833][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.630076][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.756374][T13419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 602.782101][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.807664][T13384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.834052][T13419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 602.880061][T13419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.934537][T13717] loop3: detected capacity change from 0 to 512 [ 602.950897][T13717] EXT4-fs: Ignoring removed oldalloc option [ 602.958695][T13419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 603.000302][T13717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b842e02d, mo2=0002] [ 603.021060][T13353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.035508][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.041217][T13717] System zones: 1-12 [ 603.053870][T13717] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2776: invalid indirect mapped block 1 (level 1) [ 603.134351][T13717] EXT4-fs (loop3): Remounting filesystem read-only [ 603.141295][T13717] EXT4-fs (loop3): 1 truncate cleaned up [ 603.171147][T13717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.172807][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.190384][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.213148][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.220405][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.304643][T12541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.416941][T13054] IPVS: stop unused estimator thread 0... [ 603.456024][T13725] loop3: detected capacity change from 0 to 256 [ 603.477806][T13384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.529945][T13353] veth0_vlan: entered promiscuous mode [ 603.561072][T13353] veth1_vlan: entered promiscuous mode [ 603.677472][T13353] veth0_macvtap: entered promiscuous mode [ 603.720542][T13353] veth1_macvtap: entered promiscuous mode [ 603.822820][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.859492][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.871825][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.885442][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.914661][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.925614][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.938027][T13353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.965660][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.989467][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.009456][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.039579][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.070615][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.099548][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.121367][T13353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.182000][T13353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.202735][T13353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.216280][T13353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.227610][T13353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.275737][T13419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.328666][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.486877][T13419] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.502168][T13384] veth0_vlan: entered promiscuous mode [ 604.552571][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.559777][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.581966][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.589180][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.706253][T13384] veth1_vlan: entered promiscuous mode [ 604.770888][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.787768][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.872882][ T2459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.899212][ T2459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.933324][T13347] veth0_vlan: entered promiscuous mode [ 605.050942][T13347] veth1_vlan: entered promiscuous mode [ 605.102105][T13384] veth0_macvtap: entered promiscuous mode [ 605.118172][T13751] loop2: detected capacity change from 0 to 2048 [ 605.128773][T13384] veth1_macvtap: entered promiscuous mode [ 605.179666][T13755] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 605.255052][T13347] veth0_macvtap: entered promiscuous mode [ 605.280567][T13751] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 605.305278][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.309863][T13751] Remounting filesystem read-only [ 605.360487][T13751] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 605.370212][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.370243][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.371765][T13751] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 605.391083][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.391117][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.391139][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.391167][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.391187][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.393647][T13384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.404130][T13751] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 605.507523][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.539459][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.559677][T13751] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 605.615968][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.639600][T13751] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 605.669343][ T29] audit: type=1800 audit(1719972136.770:2600): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2650" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 605.688731][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.727156][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.772072][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.776520][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2786'. [ 605.805358][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.819355][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.832701][T13384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.858362][T13347] veth1_macvtap: entered promiscuous mode [ 605.880776][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2786'. [ 605.908203][T13384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.940820][T13384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.960821][T13384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.970690][T13384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.071325][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.096651][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.126202][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.164945][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.189005][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.209276][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.227653][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.254307][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.285447][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.304186][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.327046][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.342274][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.374394][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.384967][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.395649][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.406073][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.416670][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.896136][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.145180][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.166298][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.181063][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.201913][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.256211][T13777] bridge0: entered promiscuous mode [ 607.366169][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.448495][T13347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.471628][T13789] loop2: detected capacity change from 0 to 8 [ 607.489319][T13347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.507896][T13347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.532923][T13347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.542438][T13789] SQUASHFS error: Failed to read block 0x4e8: -5 [ 607.568198][ T29] audit: type=1800 audit(1719972138.660:2601): pid=13789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2792" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 607.610873][T13789] SQUASHFS error: Failed to read block 0x6e6: -5 [ 607.617813][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 607.626937][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 607.648645][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 607.658057][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 607.668576][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 607.693520][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 607.739595][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 607.804758][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 607.817328][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 607.878264][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 607.919961][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 607.927049][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 607.936140][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 607.944929][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 607.957666][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.981151][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.989626][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 607.995905][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.021237][T13801] tmpfs: Unexpected value for 'grpquota' [ 608.034362][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.056982][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.070082][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.113829][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.132122][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.146643][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.156193][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.172553][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.208717][T13805] loop1: detected capacity change from 0 to 512 [ 608.218035][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.236784][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.237922][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.317219][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.325113][T13805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.359616][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.384042][T13805] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.390819][ T2459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.408452][ T2459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.433922][T13419] veth0_vlan: entered promiscuous mode [ 608.469344][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.513043][T13419] veth1_vlan: entered promiscuous mode [ 608.519668][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.544456][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.576773][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.586094][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.625077][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.653056][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.681198][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.709872][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.717238][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.723241][T12457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.770151][T13419] veth0_macvtap: entered promiscuous mode [ 608.775989][T13419] veth1_macvtap: entered promiscuous mode [ 608.799437][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.799542][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.799560][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.799635][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.799722][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.799739][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.799816][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.799913][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.799931][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.800009][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.800096][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.800113][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.800187][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.800272][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.800288][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.800364][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.800456][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.800473][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.800550][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.800638][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.800654][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.800733][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.800820][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.800836][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.800921][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.801009][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.801025][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.801105][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.801193][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.801209][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.801284][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.801370][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.801386][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.801461][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.801550][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.801567][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.801641][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.801729][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.801746][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.801820][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.801912][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.801929][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.802004][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.802086][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.802104][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.802177][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.802266][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.802283][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.802358][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.802445][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.802462][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.802534][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.802620][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.802638][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.802714][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.802806][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.802823][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.802915][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.803002][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.803018][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.803093][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.803183][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.803201][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.803277][T13789] SQUASHFS error: Failed to read block 0x0: -5 [ 608.833881][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.833907][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.834013][T13789] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 608.834031][T13789] SQUASHFS error: read_indexes: reading block [6e4:0] [ 608.892057][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892088][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.892106][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892126][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.892143][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892162][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.892180][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892200][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.892216][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892235][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.892252][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.892270][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.894391][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.906654][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.906679][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.906696][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.906716][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.906732][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.906752][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.906770][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.906789][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.906803][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.906822][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.906838][T13419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.906864][T13419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.925525][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.961959][T13419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.962004][T13419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.962039][T13419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.962072][T13419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.157335][T13823] loop2: detected capacity change from 0 to 64 [ 609.220802][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.220827][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.268081][T13823] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 609.332004][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.518751][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2805'. [ 609.537506][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.577249][T13830] tmpfs: Unexpected value for 'grpquota' [ 609.623657][T13831] loop5: detected capacity change from 0 to 512 [ 610.187006][T13840] loop2: detected capacity change from 0 to 512 [ 610.261510][T13840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 610.279836][T13840] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.298557][T13840] EXT4-fs warning (device loop2): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 610.684411][T13852] loop5: detected capacity change from 0 to 512 [ 610.884610][T13852] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 610.951326][T13852] EXT4-fs (loop5): 1 truncate cleaned up [ 610.967519][T13852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.080043][T13852] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.2808: corrupted in-inode xattr: overlapping e_value [ 611.140808][T13852] EXT4-fs (loop5): Remounting filesystem read-only [ 611.147477][T13852] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1766: inode #15: comm syz.5.2808: unable to update i_inline_off [ 611.160315][T13852] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 611.484530][T13384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.612416][T13353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 611.889728][T13874] tmpfs: Unexpected value for 'grpquota' [ 612.285577][T13887] bridge0: entered promiscuous mode [ 612.679199][T13901] loop0: detected capacity change from 0 to 512 [ 612.710122][T13901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 612.729829][ T5099] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 612.739477][T13901] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.805298][T13901] EXT4-fs warning (device loop0): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 612.806221][T13909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.896924][T13912] tmpfs: Unexpected value for 'grpquota' [ 612.900323][ T29] audit: type=1326 audit(1719972144.020:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13907 comm="syz.1.2831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec97375b99 code=0x0 [ 612.960900][ T5099] usb 3-1: Using ep0 maxpacket: 32 [ 612.971235][ T5099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.985985][T13910] loop3: detected capacity change from 0 to 1024 [ 612.992638][ T5099] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.992693][ T5099] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 612.992724][ T5099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.996828][ T5099] usb 3-1: config 0 descriptor?? [ 613.055726][ T5099] hub 3-1:0.0: USB hub found [ 613.258055][ T5099] hub 3-1:0.0: 2 ports detected [ 613.336158][T13919] netlink: 'syz.3.2834': attribute type 4 has an invalid length. [ 613.344259][T13919] netlink: 'syz.3.2834': attribute type 4 has an invalid length. [ 613.352473][T13919] netlink: 126008 bytes leftover after parsing attributes in process `syz.3.2834'. [ 613.463498][ T5099] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 613.484115][ T5099] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 613.495518][T13347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 613.522797][ T5099] usbhid 3-1:0.0: can't add hid device: -71 [ 613.529029][ T5099] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 613.562437][ T5099] usb 3-1: USB disconnect, device number 11 [ 613.754932][T13927] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 613.766182][T13927] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.2837'. [ 613.806546][T13929] bridge0: entered promiscuous mode [ 614.142238][T13944] tmpfs: Unexpected value for 'grpquota' [ 614.304027][T13950] netlink: 'syz.1.2848': attribute type 4 has an invalid length. [ 614.312110][T13950] netlink: 'syz.1.2848': attribute type 4 has an invalid length. [ 614.324693][T13950] netlink: 126008 bytes leftover after parsing attributes in process `syz.1.2848'. [ 614.813107][T13956] loop1: detected capacity change from 0 to 512 [ 615.644749][T13956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 615.693411][T13956] EXT4-fs (loop1): 1 truncate cleaned up [ 615.700677][T13956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.739156][T13954] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.2849: corrupted in-inode xattr: overlapping e_value [ 615.753665][T13954] EXT4-fs (loop1): Remounting filesystem read-only [ 615.760283][T13954] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1766: inode #15: comm syz.1.2849: unable to update i_inline_off [ 616.075194][T12457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.170408][T13973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.256913][ T29] audit: type=1326 audit(1719972147.370:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.3.2852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabcf575b99 code=0x0 [ 616.286644][T13980] loop4: detected capacity change from 0 to 128 [ 616.455305][T13983] debugfs: Directory '!' with parent 'ieee80211' already present! [ 617.187570][T13419] ------------[ cut here ]------------ [ 617.193900][T13419] ida_free called for id=8192 which is not allocated. [ 617.258671][T13419] WARNING: CPU: 1 PID: 13419 at lib/idr.c:525 ida_free+0x370/0x420 [ 617.266722][T13419] Modules linked in: [ 617.270775][T13419] CPU: 1 PID: 13419 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 617.281190][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 617.291366][T13419] RIP: 0010:ida_free+0x370/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 617.296352][T13419] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 617.317712][T13419] RSP: 0018:ffffc9000389f6c0 EFLAGS: 00010246 [ 617.325679][T13419] RAX: c3ac8745e76baf00 RBX: 0000000000002000 RCX: ffff88802077bc00 [ 617.333900][T13419] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 617.342026][T13419] RBP: ffffc9000389f7b0 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 617.350124][T13419] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc9000389f700 [ 617.358117][T13419] R13: dffffc0000000000 R14: ffff888063bc80a0 R15: 0000000000000246 [ 617.366161][T13419] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 617.375502][T13419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.382158][T13419] CR2: 00007fabc5413000 CR3: 0000000060978000 CR4: 0000000000350ef0 [ 617.390253][T13419] Call Trace: [ 617.393526][T13419] [ 617.396451][T13419] ? __warn+0x163/0x4e0 [ 617.400678][T13419] ? ida_free+0x370/0x420 [ 617.405014][T13419] ? report_bug+0x2b3/0x500 [ 617.412864][T13419] ? ida_free+0x370/0x420 [ 617.417241][T13419] ? handle_bug+0x3e/0x70 [ 617.423274][T13419] ? exc_invalid_op+0x1a/0x50 [ 617.427990][T13419] ? asm_exc_invalid_op+0x1a/0x20 [ 617.433146][T13419] ? __warn_printk+0x292/0x360 [ 617.438020][T13419] ? ida_free+0x370/0x420 [ 617.442504][T13419] ? __pfx_ida_free+0x10/0x10 [ 617.447237][T13419] ? synchronize_rcu+0x11b/0x360 [ 617.452357][T13419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.458387][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.464176][T13419] hci_conn_del+0x746/0xc40 [ 617.468767][T13419] hci_conn_hash_flush+0x18e/0x240 [ 617.474743][T13419] hci_dev_close_sync+0x911/0xf60 [ 617.480206][T13419] hci_unregister_dev+0x1db/0x4e0 [ 617.485268][T13419] vhci_release+0x83/0xd0 [ 617.489694][T13419] ? __pfx_vhci_release+0x10/0x10 [ 617.494761][T13419] __fput+0x24c/0x8a0 [ 617.498787][T13419] task_work_run+0x251/0x310 [ 617.503489][T13419] ? __pfx_task_work_run+0x10/0x10 [ 617.508636][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.516802][T13419] ? kmem_cache_free+0x145/0x350 [ 617.523325][T13419] do_exit+0xa27/0x27e0 [ 617.527520][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.533231][T13419] ? __pfx_do_exit+0x10/0x10 [ 617.537851][T13419] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 617.543321][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.548974][T13419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 617.555292][T13419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 617.561863][T13419] ? _raw_spin_lock_irq+0xdf/0x120 [ 617.567028][T13419] do_group_exit+0x207/0x2c0 [ 617.571697][T13419] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.577002][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.582714][T13419] ? lockdep_hardirqs_on+0x99/0x150 [ 617.587945][T13419] get_signal+0x16a1/0x1740 [ 617.592572][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.598230][T13419] ? __pfx_get_signal+0x10/0x10 [ 617.603172][T13419] arch_do_signal_or_restart+0x96/0x860 [ 617.608753][T13419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 617.616918][T13419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 617.624631][T13419] ? syscall_exit_to_user_mode+0xa3/0x360 [ 617.630454][T13419] syscall_exit_to_user_mode+0xc9/0x360 [ 617.636035][T13419] do_syscall_64+0x100/0x230 [ 617.640708][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.646635][T13419] RIP: 0033:0x7f6ff957579b [ 617.651155][T13419] Code: Unable to access opcode bytes at 0x7f6ff9575771. [ 617.658177][T13419] RSP: 002b:00007ffc2fe50f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.666652][T13419] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f6ff957579b [ 617.666700][T14000] loop1: detected capacity change from 0 to 512 [ 617.674712][T13419] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 617.688979][T13419] RBP: 00007ffc2fe5102c R08: 0000000000000000 R09: 00007ffc2fe50d17 [ 617.697046][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 617.705069][T13419] R13: 0000000000096779 R14: 0000000000096717 R15: 0000000000000009 [ 617.713163][T13419] [ 617.718134][T13419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 617.725421][T13419] CPU: 1 PID: 13419 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 617.735752][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 617.745807][T13419] Call Trace: [ 617.749082][T13419] [ 617.752009][T13419] dump_stack_lvl+0x241/0x360 [ 617.756706][T13419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.761921][T13419] ? __pfx__printk+0x10/0x10 [ 617.766616][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.772254][T13419] ? vscnprintf+0x5d/0x90 [ 617.776611][T13419] panic+0x349/0x860 [ 617.780525][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.786181][T13419] ? __warn+0x172/0x4e0 [ 617.790355][T13419] ? __pfx_panic+0x10/0x10 [ 617.794827][T13419] __warn+0x346/0x4e0 [ 617.798825][T13419] ? ida_free+0x370/0x420 [ 617.803176][T13419] report_bug+0x2b3/0x500 [ 617.807599][T13419] ? ida_free+0x370/0x420 [ 617.812029][T13419] handle_bug+0x3e/0x70 [ 617.816202][T13419] exc_invalid_op+0x1a/0x50 [ 617.820749][T13419] asm_exc_invalid_op+0x1a/0x20 [ 617.825629][T13419] RIP: 0010:ida_free+0x370/0x420 [ 617.830583][T13419] Code: 10 42 80 3c 28 00 74 05 e8 8d bd 82 f6 48 8b 7c 24 40 4c 89 fe e8 40 a5 17 00 90 48 c7 c7 60 33 ec 8c 89 de e8 51 36 df f5 90 <0f> 0b 90 90 eb 3d e8 05 08 1d f6 49 bd 00 00 00 00 00 fc ff df 4d [ 617.850202][T13419] RSP: 0018:ffffc9000389f6c0 EFLAGS: 00010246 [ 617.856275][T13419] RAX: c3ac8745e76baf00 RBX: 0000000000002000 RCX: ffff88802077bc00 [ 617.864246][T13419] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 617.872219][T13419] RBP: ffffc9000389f7b0 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 617.880192][T13419] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc9000389f700 [ 617.888162][T13419] R13: dffffc0000000000 R14: ffff888063bc80a0 R15: 0000000000000246 [ 617.896146][T13419] ? __warn_printk+0x292/0x360 [ 617.900942][T13419] ? __pfx_ida_free+0x10/0x10 [ 617.905623][T13419] ? synchronize_rcu+0x11b/0x360 [ 617.910579][T13419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.916562][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.922204][T13419] hci_conn_del+0x746/0xc40 [ 617.926977][T13419] hci_conn_hash_flush+0x18e/0x240 [ 617.932107][T13419] hci_dev_close_sync+0x911/0xf60 [ 617.937161][T13419] hci_unregister_dev+0x1db/0x4e0 [ 617.942200][T13419] vhci_release+0x83/0xd0 [ 617.946533][T13419] ? __pfx_vhci_release+0x10/0x10 [ 617.951563][T13419] __fput+0x24c/0x8a0 [ 617.955559][T13419] task_work_run+0x251/0x310 [ 617.960168][T13419] ? __pfx_task_work_run+0x10/0x10 [ 617.965376][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.971007][T13419] ? kmem_cache_free+0x145/0x350 [ 617.975964][T13419] do_exit+0xa27/0x27e0 [ 617.980137][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 617.985775][T13419] ? __pfx_do_exit+0x10/0x10 [ 617.990372][T13419] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 617.995762][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.001395][T13419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 618.007379][T13419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 618.013705][T13419] ? _raw_spin_lock_irq+0xdf/0x120 [ 618.018850][T13419] do_group_exit+0x207/0x2c0 [ 618.023447][T13419] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.028644][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.034279][T13419] ? lockdep_hardirqs_on+0x99/0x150 [ 618.039491][T13419] get_signal+0x16a1/0x1740 [ 618.044020][T13419] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.049668][T13419] ? __pfx_get_signal+0x10/0x10 [ 618.054542][T13419] arch_do_signal_or_restart+0x96/0x860 [ 618.060108][T13419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 618.066273][T13419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 618.072268][T13419] ? syscall_exit_to_user_mode+0xa3/0x360 [ 618.078035][T13419] syscall_exit_to_user_mode+0xc9/0x360 [ 618.083617][T13419] do_syscall_64+0x100/0x230 [ 618.088230][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.094142][T13419] RIP: 0033:0x7f6ff957579b [ 618.098560][T13419] Code: Unable to access opcode bytes at 0x7f6ff9575771. [ 618.105573][T13419] RSP: 002b:00007ffc2fe50f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.114003][T13419] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f6ff957579b [ 618.121981][T13419] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 618.129962][T13419] RBP: 00007ffc2fe5102c R08: 0000000000000000 R09: 00007ffc2fe50d17 [ 618.137944][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 618.145916][T13419] R13: 0000000000096779 R14: 0000000000096717 R15: 0000000000000009 [ 618.153911][T13419] [ 618.157222][T13419] Kernel Offset: disabled [ 618.161694][T13419] Rebooting in 86400 seconds..