last executing test programs: 11.394126611s ago: executing program 4 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) gettid() rt_sigprocmask(0x2, 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0) 10.774310893s ago: executing program 0 (id=452): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 9.719810783s ago: executing program 0 (id=454): syz_emit_vhci(0x0, 0xe) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x9, 0xc9, "f19efca067c985a9"}}}, 0xe) 9.710046674s ago: executing program 2 (id=455): set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 9.650554489s ago: executing program 2 (id=457): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 9.504151021s ago: executing program 0 (id=458): set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) syz_clone(0x240c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.338426046s ago: executing program 0 (id=459): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="e2b3b8c51d71eadd2cf9dda251607cf2ac834ad26f541d5e9aa46cff60ba3d1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d71bd2be176d4f54c54f91176ff4e6ce2d6ad7c2eb", 0x53, 0x8c1, 0x0, 0x0) 9.336396756s ago: executing program 4 (id=460): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0xa3b, &(0x7f0000000a80)="$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") r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0045b0f, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x343, 0x80) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$packet(r4, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x1, 0x83, 0x6, @broadcast}, 0x14) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x27fe}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0xac, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '*}}]!&\xfb{+'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) read$FUSE(r4, &(0x7f000000e400)={0x2020}, 0x2020) truncate(&(0x7f00000001c0)='./file1\x00', 0x88) 6.829675979s ago: executing program 1 (id=463): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000400)) socket(0x1d, 0x2, 0x6) r0 = socket(0x1d, 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x482, [0x20000a80, 0x0, 0x0, 0x20000ab0, 0x20000c46], 0x0, &(0x7f0000000000), &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/728]}, 0x350) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xc8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 6.791898582s ago: executing program 0 (id=464): r0 = syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102"], 0x0) syz_usb_disconnect(r0) 6.676979932s ago: executing program 1 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) io_cancel(0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000"], 0x80}}, 0x0) close(0xffffffffffffffff) 4.429136583s ago: executing program 1 (id=468): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.11729148s ago: executing program 3 (id=469): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x0, 0x12, r0, 0x83000000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 4.080851223s ago: executing program 4 (id=470): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_udp(0xa, 0x2, 0x0) ptrace$peek(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xc, 0x24, 0x8, 0x0, 0x0, 0x0, "ff533ea729"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x74, 0x2, 0x0, 0x2, "2304473ed870"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x181}}}}}}}]}}, 0x0) 4.054095975s ago: executing program 3 (id=471): timer_create(0x3, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x500, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3.875507431s ago: executing program 3 (id=472): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fspick(r0, &(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000400000400000000020000000400000009000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) fcntl$F_GET_RW_HINT(r7, 0x40b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c, 0x4}, {0x4c, 0x0, 0x3f, 0xfffffffc}, {0x6}]}) 3.806421156s ago: executing program 1 (id=473): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40010) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, "e0bf"}, @local, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x1, 0x1, 0x0, "aa"}]}}, 0x0}, 0x0) 3.572528276s ago: executing program 2 (id=474): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0xa3b, &(0x7f0000000a80)="$eJzs3U9sHFf9APC3a6/zt82mP+dXk4Y2odCWP7Ubx4Q/EZCquRA1FbdKFZcoSUtEGhCpBKl6SHLiRqsqXPl76qUCVIlcUNQTl0o0EpeeCgcOREGqxAEaEqOs31uvv95l1k7stb2fjzR+++a93fdmPDM7OzPvvQQMrXrr78zMRC2ly1fePPL3x/62JaUr4/M5mq2/ox2xRkqpluOj4fM+HJkLb3302oluYS1Nt/6WeHruRvu921JKF9LedDU10+7L1954b/rZYxePXtr3/luHrq/M0gMAwHD51tVDM7v+8qeHdn789sOH06b2/HJ+3szx7fm8/3A+8S/n//W0MF7rmDqNhXyjeaqHfCNd8nWW0wj5RnuUPxY+t9Ej36aK8kc65nVbbljPynbcTLX65IJ4vT45OfebPLV+14/VJs+ePvPiuQFVFLjn/vlISmmvyTT008XWDjH4eqzqNLtj0EcggDnxfuEiF+KVhbvT/rTR/sq/8XS9+/vhHljt7V/566v8X190xOHe2ahbU1mush9tz/F4HyE+v7TU/b98Xrwf0eiznr3uI6yX+wu96jmyyvVYrl71j9vFRvW1HJb18PWQ3rn/xP/pevkfA939y/V/k2lop9lBH4CANSs+NzeblfT4XF9M31SRvrkifUtF+tYFuRanb6t4Pwyz373yk/R6bf53fvxNv9TrYeU62305vH+J9YnXI5da/tj/iK1G+fF5YljLfn/8+VNfPvnCtbnn/2vt7f923t735ngz701Xc4ZyvTBeV28/+99cWE69R74HQn3u65K/9Xp8Yb7a+PznpI7jzKJ6TCx8345e+fYszNcM+bbkaXOobzw/2RreV84/ynG1rK/RsLyNsBxjoR7luLIzh7EesBxle+z1/H/ZPidSo/bi6TOnnsrxsp3+caSx6c78/atcb+Du9dv+ZyItbP+zvT2/Ue88LuyYn1/rPC40w/zpHvMP5Hj5nvvOyJbW/MkT3ztz8l4vPAy5c+df/e7xM2dO/cALL7zwov1i0EcmYKVNvfLy96fOnX/1ydMvH3/p1Eunzh44ePDA9PTBrxyYmWqd1091nt0DG8n8l/6gawIAAAAAAAAAAAD064dHj1z787tf+mCu/f98+7/S/r88+Vva//84tP+P7eRLO/jSDnBnl/RWntDB6ljI18jT/4X6jodydoX3/X8O2+P45fb/pbjYr2upz4Nhfuy/t+QL3Qks6i9lLPQ6EscL/FQOL+XwlwkGqLal++wcVvVvXbb10j/FEvql6F4wA1H+b+WfUvoxKe2/e/XrVI7/O1ehjtx7q9GccNDLCHT3jyHu/7t17rKCn/+r+we/jJt7p20adN1Mg59mZ43iAawNgx7/s1z3LOHZP3xz852pZLvx9MLjZey/FO7GWh9/Uvkba/zP9vh3fR3/bi4ePaG5vHL//bPrH3QUm3b3e/yNy1/6gR5fWvkf3yn/5vyiPJ76K3/2F6H8eEOoTzfz8pf1v7XP8hct/56qks6/023uf3L5ZbU98Wi/5c/VuFZfWI943bjc/4vXjYtbYflPLnf5lzlQ4+1cPgyz9TLO7FKtl/F/e4nPYXwxx8uBsDznEEc4WWr9y/MV5XtgV/j8WsX3m/F/17ev5rBqfyjj/5btsdklXu+IN7qs2416rIH16sO1e/9v/otq8HUxmTbkNDs7u7IXtCoMtHAGvv4H/Tth0OUPev1XieP/xnP4OP5vTI/j/8b0OP5vTI/j68X0rSE9rs84/m9MfzB8bhwfeCL8wI7pn6h4/+6K9Icq0vdUpH+yIn1fRfrDFemPVKQ/UJH+aEX6pyvSP1OR/lhF+hMV6Z+tSN/oSnuUYV1+GGaxfZ79H4ZHuf/Ta/8fr0gH1q+fvr3/mRd+++3mXPv/sfb1kHIf73CON/Jv5x/leLzvnTrid9LezfG/hvS1fr0DhknsPyN+vz9ekQ6sX+U5L/s3DKFa9x57+u23qtd5PuvL53L4+Rx+IYdP5nAyh1M53J/D6VWqHyvjmd+8c+j12vzv/R0hvd/nyWN7oNhP1IE+6xOvDyz1efbYj99S3W35y2wOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDD11t+ZmYlaSpevvHnk+WOnp+7M+UY7R7P1d7Qj1mi/L6WncjiSw5/nF7c+eu1EZ3g7h7U0nWqp1p6fnrvRLmlbSulC2puupmbaffnaG+9NP3vs4tFL+95/69D1lVsDAAAAsPH9NwAA//+1QhrW") r0 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) syz_emit_vhci(0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000029c0)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB, @ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x28044040}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe4e}}, 0x4040001) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "20f97783e0562618", "b86276618c28b4d8281dcb50d10935a8", "0600", "4c9561cf64252858"}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000200), 0xd) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.638514676s ago: executing program 3 (id=475): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000004340)='./bus\x00', 0x80048a, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x7, 0x2ba, &(0x7f0000004380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.578427761s ago: executing program 4 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.510205407s ago: executing program 1 (id=477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8a, &(0x7f0000000740)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@nobarrier}, {@data_err_ignore}, {@nojournal_checksum, 0x22}, {@dax_always}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x459, &(0x7f0000000d80)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000800)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x800000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.442291092s ago: executing program 4 (id=478): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2105}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x0, 0x0, 0x1e, 0x0, 0x0, "f996ff109a04000000008000"}) 2.243962839s ago: executing program 0 (id=479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) listen(r1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)) read(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 2.198464503s ago: executing program 2 (id=480): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043506"], 0x9) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) 256.233368ms ago: executing program 1 (id=481): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0xa3b, &(0x7f0000000a80)="$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") r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0045b0f, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 254.751078ms ago: executing program 3 (id=482): r0 = syz_io_uring_setup(0x931, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 243.1933ms ago: executing program 4 (id=483): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2144d4, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d63703835322c7569643d69676e6f72652c66696c657365743d30303030303030303030303030303030303132372c616e63686f723d30303030303030303030303030303030303030332c66696c657365743d30303030303030303030303030303030303030302c6e6f6164696e6963622c726f6f746469723d30303030303030303030303030303030303030352c004524cde9924a2eb7ed92c6d3f4"], 0xfe, 0xc24, &(0x7f0000001480)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 142.207728ms ago: executing program 2 (id=484): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x3b3}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 109.325751ms ago: executing program 3 (id=485): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fspick(r0, &(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000400000400000000020000000400000009000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) socket$inet6(0xa, 0x2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c, 0x4}, {0x4c, 0x0, 0x3f, 0xfffffffc}, {0x6}]}) 0s ago: executing program 2 (id=486): r0 = io_uring_setup(0x66a, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6][ T434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.702767][ T434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.720839][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.723446][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.725792][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.733022][ T4031] device veth1_macvtap entered promiscuous mode [ 41.756666][ T1866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.758407][ T1866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.776994][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.779185][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.785968][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.788144][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.799034][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.802298][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.807846][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.812557][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.814730][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.816726][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.818872][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.821624][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.823696][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.827001][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.831949][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.833786][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.835620][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.837327][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.949783][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.956882][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.959379][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.966443][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.968776][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.972159][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.979563][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.983053][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.985126][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.987275][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.989211][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.992381][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.994580][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.996858][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.377498][ T4103] loop3: detected capacity change from 0 to 1024 [ 42.437919][ T4103] hfsplus: unable to parse mount options [ 42.805149][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.840546][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.843130][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.866482][ T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.869419][ T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.895027][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.944419][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.946744][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.948826][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.960541][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.962732][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.976403][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.978764][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.985956][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.000890][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.003464][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.005869][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.053033][ T4031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.054999][ T4031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.056782][ T4031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.058531][ T4031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.062642][ T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.063198][ T1866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.069007][ T1866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.070160][ T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.090442][ T4104] Bluetooth: hci1: command 0x040f tx timeout [ 43.096334][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.098612][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.160219][ T4068] Bluetooth: hci4: command 0x040f tx timeout [ 43.161690][ T4068] Bluetooth: hci0: command 0x040f tx timeout [ 43.163058][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 43.164362][ T4068] Bluetooth: hci3: command 0x040f tx timeout [ 43.242699][ T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.245321][ T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.340211][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.341970][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.350936][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.353309][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.443700][ T4112] binder: 4111:4112 tried to acquire reference to desc 0, got 1 instead [ 43.446413][ T1866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.448370][ T1866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.455178][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.456917][ T4112] binder: 4111:4112 got transaction with invalid data ptr [ 43.458624][ T4112] binder: 4111:4112 transaction failed 29201/-14, size 0-24 line 3186 [ 43.608732][ T4023] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.741203][ T4122] loop0: detected capacity change from 0 to 128 [ 43.783425][ T4122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.185181][ T4023] Bluetooth: hci1: command 0x0419 tx timeout [ 45.240481][ T4104] Bluetooth: hci3: command 0x0419 tx timeout [ 45.242729][ T4104] Bluetooth: hci2: command 0x0419 tx timeout [ 45.244162][ T4104] Bluetooth: hci0: command 0x0419 tx timeout [ 45.247109][ T4104] Bluetooth: hci4: command 0x0419 tx timeout [ 45.344075][ T4139] loop2: detected capacity change from 0 to 128 [ 45.411689][ T4139] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.421163][ T4139] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.525102][ T4142] loop1: detected capacity change from 0 to 1024 [ 45.571856][ T4142] hfsplus: unable to parse mount options [ 48.719712][ T4163] binder: 4162:4163 tried to acquire reference to desc 0, got 1 instead [ 48.731915][ T4163] binder: 4162:4163 got transaction with invalid data ptr [ 48.733706][ T4163] binder: 4162:4163 transaction failed 29201/-14, size 0-24 line 3186 [ 48.763112][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.856880][ T4167] loop4: detected capacity change from 0 to 128 [ 49.819968][ T4167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.949307][ T4171] loop3: detected capacity change from 0 to 40427 [ 50.977328][ T4186] udc-core: couldn't find an available UDC or it's busy [ 50.986728][ T4186] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.008038][ T4171] F2FS-fs (loop3): invalid crc value [ 51.040612][ T4171] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.087043][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.089340][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.093019][ T4171] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 52.277368][ T4196] loop0: detected capacity change from 0 to 1024 [ 52.520824][ T4196] hfsplus: unable to parse mount options [ 52.524869][ T4022] attempt to access beyond end of device [ 52.524869][ T4022] loop3: rw=524288, want=45072, limit=40427 [ 52.528286][ T4022] attempt to access beyond end of device [ 52.528286][ T4022] loop3: rw=0, want=45072, limit=40427 [ 52.622570][ T1630] attempt to access beyond end of device [ 52.622570][ T1630] loop3: rw=2049, want=41088, limit=40427 [ 53.163656][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.201195][ T4178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.697923][ T4178] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.700689][ T4178] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.702637][ T4178] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.704449][ T4178] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.935290][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 54.034171][ T4207] binder: 4206:4207 tried to acquire reference to desc 0, got 1 instead [ 54.048916][ T4068] binder: release 4206:4207 transaction 15 out, still active [ 54.054386][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 54.063019][ T4068] binder: send failed reply for transaction 15, target dead [ 54.103478][ T4210] loop4: detected capacity change from 0 to 128 [ 54.165092][ T4210] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.378991][ T4227] udc-core: couldn't find an available UDC or it's busy [ 55.380683][ T4227] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.605605][ T4134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.739447][ T4134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.149889][ T4235] loop0: detected capacity change from 0 to 1024 [ 56.580823][ T4235] hfsplus: unable to parse mount options [ 56.628062][ T4134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.729591][ T4134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.837899][ T4241] udc-core: couldn't find an available UDC or it's busy [ 56.850068][ T4241] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.898001][ T4243] binder: 4242:4243 tried to acquire reference to desc 0, got 1 instead [ 56.908079][ T4055] binder: release 4242:4243 transaction 20 out, still active [ 56.909755][ T4055] binder: undelivered TRANSACTION_COMPLETE [ 56.936179][ T13] binder: send failed reply for transaction 20, target dead [ 57.072450][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 57.091794][ T4255] loop0: detected capacity change from 0 to 128 [ 57.143612][ T4255] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.504011][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 58.762686][ T4296] binder: 4295:4296 tried to acquire reference to desc 0, got 1 instead [ 59.246017][ T4068] Bluetooth: hci1: command 0x0409 tx timeout [ 59.330956][ T4299] loop0: detected capacity change from 0 to 1024 [ 59.615847][ T4071] binder: release 4295:4296 transaction 25 out, still active [ 59.617516][ T4071] binder: undelivered TRANSACTION_COMPLETE [ 59.630116][ T4071] binder: send failed reply for transaction 25, target dead [ 59.682320][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.683914][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.686639][ T4249] device bridge_slave_0 entered promiscuous mode [ 59.690638][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.692285][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.694472][ T4249] device bridge_slave_1 entered promiscuous mode [ 59.710992][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.717312][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.735012][ T4249] team0: Port device team_slave_0 added [ 59.738217][ T4249] team0: Port device team_slave_1 added [ 59.752690][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.754202][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.771760][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.793898][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.798886][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.817135][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.840574][ T4299] hfsplus: unable to parse mount options [ 60.875575][ T4313] loop2: detected capacity change from 0 to 128 [ 60.903324][ T4249] device hsr_slave_0 entered promiscuous mode [ 60.980380][ T4249] device hsr_slave_1 entered promiscuous mode [ 61.021841][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.023492][ T4249] Cannot create hsr debugfs directory [ 61.065009][ T4313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.310032][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 62.261731][ T4341] binder: 4340:4341 tried to acquire reference to desc 0, got 1 instead [ 62.270873][ T21] binder: release 4340:4341 transaction 30 out, still active [ 62.272526][ T21] binder: undelivered TRANSACTION_COMPLETE [ 62.302720][ T21] binder: send failed reply for transaction 30, target dead [ 63.292836][ T4362] loop1: detected capacity change from 0 to 1024 [ 63.412165][ T4362] hfsplus: unable to parse mount options [ 63.414424][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 63.973823][ T4364] loop1: detected capacity change from 0 to 128 [ 64.003835][ T4364] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.207418][ T4375] udc-core: couldn't find an available UDC or it's busy [ 64.209018][ T4375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.391547][ T4134] device hsr_slave_0 left promiscuous mode [ 64.421730][ T4134] device hsr_slave_1 left promiscuous mode [ 64.510826][ T4134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.512694][ T4134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.515547][ T4134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.517430][ T4134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.521616][ T4134] device bridge_slave_1 left promiscuous mode [ 64.523858][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.565130][ T4134] device bridge_slave_0 left promiscuous mode [ 64.566815][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.700504][ T4134] device veth1_macvtap left promiscuous mode [ 64.702416][ T4134] device veth0_macvtap left promiscuous mode [ 64.703973][ T4134] device veth1_vlan left promiscuous mode [ 64.712435][ T4134] device veth0_vlan left promiscuous mode [ 64.837635][ T4388] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.80' sets config #0 [ 64.852309][ T4388] udc-core: couldn't find an available UDC or it's busy [ 64.856474][ T4388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.019477][ T4391] udc-core: couldn't find an available UDC or it's busy [ 65.021351][ T4391] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.093603][ T4134] team0 (unregistering): Port device team_slave_1 removed [ 65.105800][ T4134] team0 (unregistering): Port device team_slave_0 removed [ 65.116269][ T4134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.170701][ T4134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.408247][ T4134] bond0 (unregistering): Released all slaves [ 65.469952][ T4104] Bluetooth: hci1: command 0x0419 tx timeout [ 65.472075][ T4402] loop2: detected capacity change from 0 to 128 [ 65.589807][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.674511][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.721586][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.776098][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.799986][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.049279][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.072909][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.075014][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.098751][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.125487][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.127950][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.130286][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.131737][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.151487][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.172161][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.174668][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.177089][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.178574][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.212264][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.223948][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.234137][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.239454][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.270668][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.300452][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.311543][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.313833][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.316019][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.323969][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.326219][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.341269][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.665809][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.669253][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.703113][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.738625][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.741278][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.789250][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.792706][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.797189][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.812032][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.822210][ T4249] device veth0_vlan entered promiscuous mode [ 66.844535][ T4249] device veth1_vlan entered promiscuous mode [ 66.904984][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.907432][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.909666][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.917861][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.934640][ T4249] device veth0_macvtap entered promiscuous mode [ 66.939410][ T4249] device veth1_macvtap entered promiscuous mode [ 66.988592][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.000297][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.005609][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.011044][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.016810][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.021512][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.031835][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.036222][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.038365][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.041291][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.044939][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.056930][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.062790][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.067532][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.084254][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.092995][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.099696][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.113891][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.120239][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.122693][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.133641][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.140179][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144454][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.148621][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.320561][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.322455][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.325970][ T1866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.372289][ T1866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.374034][ T1866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.377512][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.503364][ T4467] loop1: detected capacity change from 0 to 16 [ 67.536394][ T4467] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.744327][ T4472] udc-core: couldn't find an available UDC or it's busy [ 67.801144][ T4472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.983473][ T4484] loop0: detected capacity change from 0 to 128 [ 68.048015][ T4489] loop4: detected capacity change from 0 to 256 [ 68.061842][ T4484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.136007][ T4489] FAT-fs (loop4): bogus number of FAT sectors [ 68.137472][ T4489] FAT-fs (loop4): Can't find a valid FAT filesystem [ 68.638938][ T4509] loop4: detected capacity change from 0 to 512 [ 68.704707][ T4509] EXT4-fs (loop4): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 69.864452][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.866117][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.905186][ T1533] cfg80211: failed to load regulatory.db [ 70.190150][ T4519] loop2: detected capacity change from 0 to 512 [ 70.365842][ T4519] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 70.416728][ T4511] loop3: detected capacity change from 0 to 40427 [ 70.472173][ T4511] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 70.473588][ T4511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 70.552807][ T4526] udc-core: couldn't find an available UDC or it's busy [ 70.554472][ T4526] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.568606][ T4511] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 70.651862][ T4511] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 70.653334][ T4511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.123071][ T4532] attempt to access beyond end of device [ 71.123071][ T4532] loop3: rw=2049, want=53256, limit=40427 [ 71.248004][ T4532] attempt to access beyond end of device [ 71.248004][ T4532] loop3: rw=2049, want=53320, limit=40427 [ 71.808157][ T4249] attempt to access beyond end of device [ 71.808157][ T4249] loop3: rw=2049, want=45104, limit=40427 [ 73.184248][ T4545] loop3: detected capacity change from 0 to 128 [ 73.308908][ T4545] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.565432][ T4550] hub 6-0:1.0: USB hub found [ 73.567809][ T4550] hub 6-0:1.0: 8 ports detected [ 74.294695][ T4555] loop1: detected capacity change from 0 to 512 [ 74.308925][ T4556] capability: warning: `syz.0.113' uses deprecated v2 capabilities in a way that may be insecure [ 74.411033][ T4555] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.115: inline data xattr refers to an external xattr inode [ 74.415154][ T4555] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.115: couldn't read orphan inode 12 (err -117) [ 74.425243][ T4566] udc-core: couldn't find an available UDC or it's busy [ 74.427410][ T4566] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.430380][ T4555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.741753][ T4572] loop4: detected capacity change from 0 to 1024 [ 74.761681][ T4574] loop1: detected capacity change from 0 to 256 [ 74.834453][ T4572] hfsplus: unable to parse mount options [ 76.008690][ T26] audit: type=1326 audit(75.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4573 comm="syz.1.120" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x0 [ 76.812974][ T4586] loop0: detected capacity change from 0 to 1024 [ 76.922791][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 78.162762][ T4593] loop2: detected capacity change from 0 to 128 [ 78.194618][ T4595] loop1: detected capacity change from 0 to 512 [ 78.360921][ T4595] EXT4-fs (loop1): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 78.381721][ T4593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.512966][ T4603] loop3: detected capacity change from 0 to 512 [ 78.602472][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.741028][ T4611] tipc: Started in network mode [ 78.742405][ T4611] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 78.745419][ T4611] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 78.747317][ T4611] tipc: Enabled bearer , priority 10 [ 79.836340][ T21] tipc: Node number set to 1 [ 80.051933][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.277730][ T26] audit: type=1326 audit(81.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.474060][ T26] audit: type=1326 audit(81.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.530698][ T26] audit: type=1326 audit(81.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.574521][ T26] audit: type=1326 audit(81.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.761439][ T26] audit: type=1326 audit(81.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.765922][ T26] audit: type=1326 audit(81.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.783713][ T26] audit: type=1326 audit(81.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 81.788740][ T26] audit: type=1326 audit(81.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 82.041054][ T4638] cgroup: Unknown subsys name 'fscontext' [ 82.575177][ T4642] loop1: detected capacity change from 0 to 128 [ 82.980147][ T4647] loop2: detected capacity change from 0 to 256 [ 85.949038][ T4660] loop1: detected capacity change from 0 to 512 [ 86.028697][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.226212][ T26] audit: type=1326 audit(87.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.237359][ T26] audit: type=1326 audit(87.190:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.259618][ T26] audit: type=1326 audit(87.190:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.281862][ T26] audit: type=1326 audit(87.190:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.286548][ T26] audit: type=1326 audit(87.190:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.321831][ T26] audit: type=1326 audit(87.200:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.326119][ T26] audit: type=1326 audit(87.200:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.349428][ T26] audit: type=1326 audit(87.200:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4659 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9279b9a8 code=0x7ffc0000 [ 87.647196][ T4684] loop3: detected capacity change from 0 to 16 [ 87.649591][ T4682] udc-core: couldn't find an available UDC or it's busy [ 87.652939][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.679555][ T4682] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.568273][ T4684] erofs: (device loop3): mounted with root inode @ nid 36. [ 90.559963][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 90.640083][ T7] usb 1-1: device descriptor read/all, error -71 [ 90.934557][ T4700] loop4: detected capacity change from 0 to 256 [ 91.817508][ T4697] fuse: Unknown parameter './file0' [ 92.536775][ T4700] FAT-fs (loop4): bogus number of FAT sectors [ 92.568107][ T4700] FAT-fs (loop4): Can't find a valid FAT filesystem [ 92.692797][ T4704] loop3: detected capacity change from 0 to 2048 [ 92.758790][ T4710] loop0: detected capacity change from 0 to 512 [ 92.760890][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.858158][ T4710] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.000824][ T26] audit: type=1326 audit(93.970:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba7599a8 code=0x7ffc0000 [ 94.017095][ T26] audit: type=1326 audit(93.980:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffba7599a8 code=0x7ffc0000 [ 94.024657][ T26] audit: type=1326 audit(93.990:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba7599a8 code=0x7ffc0000 [ 94.194346][ T4727] 9pnet: Insufficient options for proto=fd [ 94.356964][ T4713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 94.478078][ T4720] loop1: detected capacity change from 0 to 40427 [ 94.541264][ T4720] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 94.544767][ T4720] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 94.613406][ T4720] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 94.625187][ T4734] udc-core: couldn't find an available UDC or it's busy [ 94.626781][ T4734] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.631895][ T4722] loop2: detected capacity change from 0 to 40427 [ 94.662711][ T4720] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 94.664431][ T4720] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.695064][ T9] tipc: Subscription rejected, illegal request [ 94.702056][ T4722] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 94.703454][ T4722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 94.873026][ T4722] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 94.989708][ T4722] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 94.992369][ T4722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.291140][ T4753] attempt to access beyond end of device [ 95.291140][ T4753] loop2: rw=2049, want=53256, limit=40427 [ 95.406914][ T4753] attempt to access beyond end of device [ 95.406914][ T4753] loop2: rw=2049, want=53320, limit=40427 [ 96.115994][ T4031] attempt to access beyond end of device [ 96.115994][ T4031] loop2: rw=2049, want=45104, limit=40427 [ 97.185399][ T4757] 9pnet: Unknown protocol version 9p20\++} [ 97.189464][ T4757] bridge0: port 3(syz_tun) entered blocking state [ 97.191444][ T4757] bridge0: port 3(syz_tun) entered disabled state [ 97.194861][ T4757] device syz_tun entered promiscuous mode [ 97.256068][ T4758] udc-core: couldn't find an available UDC or it's busy [ 97.257512][ T4758] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.517309][ T4760] loop3: detected capacity change from 0 to 1024 [ 97.541043][ T4760] hfsplus: unable to parse mount options [ 99.911430][ T4771] loop3: detected capacity change from 0 to 1024 [ 99.963130][ T4771] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 99.990013][ T4771] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 100.072809][ T4771] loop3: detected capacity change from 0 to 512 [ 100.162955][ T4771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.282171][ T4021] attempt to access beyond end of device [ 101.282171][ T4021] loop1: rw=524288, want=45072, limit=40427 [ 101.284827][ T4021] attempt to access beyond end of device [ 101.284827][ T4021] loop1: rw=0, want=45072, limit=40427 [ 101.373210][ T4282] attempt to access beyond end of device [ 101.373210][ T4282] loop1: rw=2049, want=45112, limit=40427 [ 101.678598][ T4792] cgroup: Unknown subsys name 'fscontext' [ 104.282033][ T4809] udc-core: couldn't find an available UDC or it's busy [ 104.283561][ T4809] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.611006][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.675507][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.681929][ T4812] loop0: detected capacity change from 0 to 1024 [ 105.731052][ T4812] hfsplus: unable to parse mount options [ 105.848125][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.922002][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.943859][ T4825] loop2: detected capacity change from 0 to 256 [ 107.022200][ T4829] loop4: detected capacity change from 0 to 512 [ 107.206781][ T4829] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.410936][ T4821] chnl_net:caif_netlink_parms(): no params data found [ 108.410958][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 108.613847][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.628790][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.658587][ T4821] device bridge_slave_0 entered promiscuous mode [ 108.682186][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.687114][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.689353][ T4821] device bridge_slave_1 entered promiscuous mode [ 108.843522][ T4821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.847620][ T4821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.905840][ T4821] team0: Port device team_slave_0 added [ 108.908983][ T4821] team0: Port device team_slave_1 added [ 108.985263][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.990165][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.008221][ T4821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.028911][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.035307][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.074357][ T4821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.272367][ T4821] device hsr_slave_0 entered promiscuous mode [ 109.312786][ T4821] device hsr_slave_1 entered promiscuous mode [ 109.350100][ T4821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.351667][ T4821] Cannot create hsr debugfs directory [ 109.517922][ T4870] loop0: detected capacity change from 0 to 2048 [ 109.613636][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.649783][ T4876] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 109.717123][ T4880] loop2: detected capacity change from 0 to 1024 [ 109.763159][ T4880] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 109.792442][ T4880] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 110.077116][ T9] device hsr_slave_0 left promiscuous mode [ 110.131390][ T4893] loop4: detected capacity change from 0 to 512 [ 110.133116][ T9] device hsr_slave_1 left promiscuous mode [ 110.138110][ T4893] EXT4-fs (loop4): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 110.208007][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.209734][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.215302][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.217107][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.221338][ T9] device bridge_slave_1 left promiscuous mode [ 110.222754][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.289658][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.305493][ T4898] fs-verity (loop0, inode 13): Unknown hash algorithm number: 3 [ 110.430163][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 110.430337][ T9] device veth1_macvtap left promiscuous mode [ 110.432872][ T9] device veth0_macvtap left promiscuous mode [ 110.434280][ T9] device veth1_vlan left promiscuous mode [ 110.435643][ T9] device veth0_vlan left promiscuous mode [ 111.767135][ T4906] udc-core: couldn't find an available UDC or it's busy [ 111.769044][ T4906] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.972146][ T9] team0 (unregistering): Port device team_slave_1 removed [ 111.989081][ T9] team0 (unregistering): Port device team_slave_0 removed [ 112.021660][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.155746][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.510109][ T4104] Bluetooth: hci0: command 0x040f tx timeout [ 112.870721][ T9] bond0 (unregistering): Released all slaves [ 113.016629][ T4915] loop0: detected capacity change from 0 to 2048 [ 113.128748][ T4915] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.202: bad orphan inode 8192 [ 113.138552][ T4915] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.198779][ T4821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.353292][ T4821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.990916][ T4821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.042698][ T4821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.176736][ T4933] loop4: detected capacity change from 0 to 1024 [ 114.195924][ T4933] hfsplus: unable to parse mount options [ 114.337755][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.345919][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.348394][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.363280][ T4821] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.372117][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.374491][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.376537][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.378046][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.388780][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.393314][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.400919][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.403005][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.404584][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.420560][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.423628][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.433759][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.441830][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.469379][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.473362][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.479359][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.484783][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.494093][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.501970][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.507561][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.522920][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.610411][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 114.795824][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.797783][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.824147][ T4821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.831263][ T4070] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.867571][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.870253][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.921486][ T4821] device veth0_vlan entered promiscuous mode [ 114.931038][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.933319][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.974551][ T4821] device veth1_vlan entered promiscuous mode [ 114.996376][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.004968][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.017561][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.034197][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.070436][ T4070] usb 1-1: Using ep0 maxpacket: 16 [ 115.074392][ T4821] device veth0_macvtap entered promiscuous mode [ 115.099553][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.102200][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.109576][ T4821] device veth1_macvtap entered promiscuous mode [ 115.123697][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.126141][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.190489][ T4070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.193334][ T4070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.195808][ T4070] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.198616][ T4070] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.204892][ T4821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.209905][ T4070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.219280][ T4821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.223432][ T4966] hub 6-0:1.0: USB hub found [ 115.224849][ T4966] hub 6-0:1.0: 8 ports detected [ 115.246311][ T4821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.254431][ T4070] usb 1-1: config 0 descriptor?? [ 115.259297][ T4821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.272547][ T4821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.280746][ T4821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.292723][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.298920][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.309775][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.326060][ T4821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.334991][ T4821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.342616][ T4821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.350435][ T4821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.358042][ T4821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.367752][ T4821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.377968][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.385545][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.388393][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.403987][ T4821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.411450][ T4821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.424306][ T4821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.430520][ T4821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.592285][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.601853][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.607317][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.626150][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.628842][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.637564][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.737212][ T4956] loop3: detected capacity change from 0 to 40427 [ 115.744525][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.753412][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.758319][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.763126][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.767836][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.774687][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.775105][ T4956] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.778095][ T4956] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.779159][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.783561][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.787769][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.793627][ T4070] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 115.831410][ T4070] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input2 [ 115.851418][ T4070] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 115.933679][ T4956] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.939782][ T4071] usb 1-1: USB disconnect, device number 4 [ 115.944616][ T4985] loop2: detected capacity change from 0 to 512 [ 115.981732][ T4956] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.983317][ T4956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.993899][ T4985] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.631004][ T5002] fuse: Unknown parameter 'roo00000000000000000000' [ 118.913729][ T5011] loop0: detected capacity change from 0 to 1024 [ 118.972811][ T5013] loop3: detected capacity change from 0 to 2048 [ 119.009566][ T5011] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 119.108428][ T5013] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.215: bad orphan inode 8192 [ 119.111140][ T5013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.810169][ T5029] udc-core: couldn't find an available UDC or it's busy [ 121.811788][ T5029] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.072837][ T5031] loop2: detected capacity change from 0 to 512 [ 122.945762][ T5031] EXT4-fs (loop2): bad s_want_extra_isize: 11962 [ 123.749999][ T5036] binder: 5030:5036 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 124.379985][ T5039] loop1: detected capacity change from 0 to 512 [ 124.588601][ T5045] loop0: detected capacity change from 0 to 1024 [ 124.648491][ T5045] hfsplus: unable to parse mount options [ 125.217749][ T5043] loop2: detected capacity change from 0 to 512 [ 125.316114][ T5039] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.350548][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.856454][ T5066] loop3: detected capacity change from 0 to 256 [ 129.181577][ T5081] udc-core: couldn't find an available UDC or it's busy [ 129.194493][ T5082] loop3: detected capacity change from 0 to 512 [ 129.207313][ T5081] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.264217][ T5082] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.993769][ T26] audit: type=1326 audit(129.820:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.129721][ T26] audit: type=1326 audit(129.820:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.158744][ T26] audit: type=1326 audit(129.880:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.200105][ T26] audit: type=1326 audit(129.890:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.204512][ T26] audit: type=1326 audit(129.890:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.208861][ T26] audit: type=1326 audit(129.910:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.253128][ T26] audit: type=1326 audit(129.910:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.257915][ T26] audit: type=1326 audit(129.910:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a53b9a8 code=0x7ffc0000 [ 130.335632][ T5076] loop1: detected capacity change from 0 to 40427 [ 130.524492][ T5076] F2FS-fs (loop1): invalid crc value [ 130.615892][ T5076] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.654036][ T5108] loop0: detected capacity change from 0 to 512 [ 130.718376][ T5076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 130.746109][ T5108] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.916334][ T5076] overlayfs: failed to resolve './file0': -2 [ 131.463254][ T5109] sched: RT throttling activated [ 132.020149][ T5115] fuse: Unknown parameter 'roo00000000000000000000' [ 132.653632][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655301][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.733308][ T4821] attempt to access beyond end of device [ 132.733308][ T4821] loop1: rw=2049, want=45112, limit=40427 [ 132.792844][ T5121] udc-core: couldn't find an available UDC or it's busy [ 132.794491][ T5121] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.201153][ T5135] loop3: detected capacity change from 0 to 512 [ 133.253843][ T5135] EXT4-fs (loop3): Ignoring removed nobh option [ 133.267134][ T5135] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.244: bad orphan inode 17 [ 133.269764][ T5135] ext4_test_bit(bit=16, block=4) = 1 [ 133.288816][ T5135] is_bad_inode(inode)=0 [ 133.289709][ T5135] NEXT_ORPHAN(inode)=0 [ 133.298985][ T5135] max_ino=32 [ 133.316715][ T5135] i_nlink=1 [ 133.317493][ T5135] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,,errors=continue. Quota mode: none. [ 133.795972][ T5142] loop2: detected capacity change from 0 to 2048 [ 133.879992][ T5050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 133.898320][ T5142] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 134.488704][ T5138] loop1: detected capacity change from 0 to 40427 [ 134.633144][ T5138] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 134.634697][ T5138] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 134.739952][ T5138] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 134.971617][ T5156] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 134.987640][ T5138] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 134.989098][ T5138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.139192][ T5150] loop3: detected capacity change from 0 to 40427 [ 135.214653][ T5150] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 135.216364][ T5150] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 136.019535][ T5163] attempt to access beyond end of device [ 136.019535][ T5163] loop1: rw=2049, want=53256, limit=40427 [ 136.179182][ T5158] attempt to access beyond end of device [ 136.179182][ T5158] loop1: rw=2049, want=53320, limit=40427 [ 136.224337][ T5150] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 136.484443][ T5150] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 136.485925][ T5150] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.528953][ T4821] attempt to access beyond end of device [ 136.528953][ T4821] loop1: rw=2049, want=45104, limit=40427 [ 136.593306][ T1630] tipc: Subscription rejected, illegal request [ 137.504431][ T5168] fuse: Unknown parameter 'roo00000000000000000000' [ 137.667844][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 137.669332][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 138.041596][ T4249] attempt to access beyond end of device [ 138.041596][ T4249] loop3: rw=524288, want=45072, limit=40427 [ 138.044172][ T4249] attempt to access beyond end of device [ 138.044172][ T4249] loop3: rw=0, want=45072, limit=40427 [ 138.056278][ T5176] loop1: detected capacity change from 0 to 256 [ 138.077752][ T5161] loop4: detected capacity change from 0 to 40427 [ 138.102545][ T1630] attempt to access beyond end of device [ 138.102545][ T1630] loop3: rw=2049, want=45112, limit=40427 [ 138.135213][ T5161] F2FS-fs (loop4): invalid crc value [ 138.253141][ T5161] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 139.709976][ T4068] Bluetooth: hci5: command 0x1001 tx timeout [ 139.927064][ T5190] loop1: detected capacity change from 0 to 256 [ 139.930818][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 141.403741][ T5193] loop4: detected capacity change from 0 to 40427 [ 141.470093][ T5193] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 141.471488][ T5193] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 141.508270][ T5199] chnl_net:caif_netlink_parms(): no params data found [ 141.615049][ T5193] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 141.647411][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.652885][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.656486][ T5199] device bridge_slave_0 entered promiscuous mode [ 141.666167][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.668975][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.673951][ T5199] device bridge_slave_1 entered promiscuous mode [ 141.727652][ T5193] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 141.729445][ T5193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.795301][ T5199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.799485][ T5199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.965853][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 141.991052][ T5199] team0: Port device team_slave_0 added [ 141.995040][ T5199] team0: Port device team_slave_1 added [ 142.760713][ T5214] attempt to access beyond end of device [ 142.760713][ T5214] loop4: rw=2049, want=53256, limit=40427 [ 142.941385][ T5212] attempt to access beyond end of device [ 142.941385][ T5212] loop4: rw=2049, want=53320, limit=40427 [ 142.948310][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 142.975086][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.976599][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.000779][ T5199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.007063][ T5199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.011023][ T5199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.038521][ T5199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.130785][ T4034] attempt to access beyond end of device [ 143.130785][ T4034] loop4: rw=2049, want=45104, limit=40427 [ 143.219712][ T5199] device hsr_slave_0 entered promiscuous mode [ 143.239998][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 143.280573][ T5199] device hsr_slave_1 entered promiscuous mode [ 143.300059][ T5199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.301686][ T5199] Cannot create hsr debugfs directory [ 143.501248][ T5199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.551965][ T5218] loop4: detected capacity change from 0 to 256 [ 143.722118][ T5199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.773214][ T5216] loop0: detected capacity change from 0 to 40427 [ 144.723326][ T5216] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 144.728415][ T5199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.731001][ T5216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 144.797360][ T5216] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 144.809159][ T5199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.890684][ T5216] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 144.892065][ T5216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.116177][ T5199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.068299][ T5199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.161207][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 146.176995][ T5199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.193863][ T5234] udc-core: couldn't find an available UDC or it's busy [ 146.195361][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.242216][ T5199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.274105][ T4030] attempt to access beyond end of device [ 146.274105][ T4030] loop0: rw=2049, want=45112, limit=40427 [ 146.562977][ T5199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.596353][ T5199] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.632056][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.634231][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.636315][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.638542][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.650472][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.651901][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.670471][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.679515][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.699372][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.712785][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.714447][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.725797][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.736138][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 146.752611][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.755097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.788050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.794046][ T5241] loop4: detected capacity change from 0 to 256 [ 146.796362][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.801693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.001476][ T5199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.003694][ T5199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.016824][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.019192][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.022664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.688863][ T5236] loop1: detected capacity change from 0 to 40427 [ 147.689601][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.690296][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.693273][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.906628][ T5236] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 147.909308][ T5236] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 148.411071][ T4068] Bluetooth: hci5: command 0x0409 tx timeout [ 148.412477][ T4068] Bluetooth: hci1: command 0x040f tx timeout [ 148.464631][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.466472][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.482663][ T5228] device bridge_slave_0 entered promiscuous mode [ 148.496874][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.498522][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.528291][ T5228] device bridge_slave_1 entered promiscuous mode [ 148.550305][ T5236] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.616102][ T5236] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 148.617547][ T5236] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.634708][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.671556][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.850937][ T1533] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.860163][ T5228] team0: Port device team_slave_0 added [ 148.872603][ T5228] team0: Port device team_slave_1 added [ 150.532636][ T4069] Bluetooth: hci1: command 0x0419 tx timeout [ 150.534775][ T4069] Bluetooth: hci5: command 0x041b tx timeout [ 150.760995][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.762740][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.774924][ T5199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.780169][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.781746][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.789546][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.801944][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.803413][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.817664][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.976503][ T5228] device hsr_slave_0 entered promiscuous mode [ 151.020537][ T5228] device hsr_slave_1 entered promiscuous mode [ 151.060562][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.063152][ T5228] Cannot create hsr debugfs directory [ 151.343147][ T5280] loop4: detected capacity change from 0 to 512 [ 151.490194][ T1533] usb 1-1: device descriptor read/all, error -71 [ 151.496498][ T5282] loop1: detected capacity change from 0 to 256 [ 151.614756][ T5228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.686341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.688910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.510107][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.512651][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.669708][ T4068] Bluetooth: hci5: command 0x040f tx timeout [ 152.675368][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.690686][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.704127][ T5199] device veth0_vlan entered promiscuous mode [ 153.524610][ T5228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.535807][ T5199] device veth1_vlan entered promiscuous mode [ 153.583002][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.585245][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.595442][ T5297] loop0: detected capacity change from 0 to 2048 [ 153.653049][ T5228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.675680][ T5297] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.283: bad orphan inode 8192 [ 153.679150][ T5297] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.688586][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.694444][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.755817][ T5228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.832019][ T5199] device veth0_macvtap entered promiscuous mode [ 153.837469][ T5199] device veth1_macvtap entered promiscuous mode [ 153.902540][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.904886][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.926520][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.928823][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.930988][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.933082][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.935133][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.937527][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.944894][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.955348][ T5306] loop4: detected capacity change from 0 to 512 [ 153.967960][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.970525][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.972861][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.015558][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.894272][ T1533] Bluetooth: hci5: command 0x0419 tx timeout [ 154.913912][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.916343][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.918418][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.922982][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.926759][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.929922][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.932100][ T5199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.934373][ T5199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.937869][ T5199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.940150][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.943191][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.949781][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,nodiscard,,errors=continue. Quota mode: writeback. [ 154.958341][ T5199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.964337][ T5199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.968135][ T5199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.980424][ T5199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.173412][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.228073][ T5318] loop0: detected capacity change from 0 to 512 [ 155.236541][ T5318] ======================================================= [ 155.236541][ T5318] WARNING: The mand mount option has been deprecated and [ 155.236541][ T5318] and is ignored by this kernel. Remove the mand [ 155.236541][ T5318] option from the mount to silence this warning. [ 155.236541][ T5318] ======================================================= [ 155.265779][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.295171][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.332670][ T5324] loop1: detected capacity change from 0 to 256 [ 155.338190][ T5318] EXT4-fs (loop0): 1 orphan inode deleted [ 155.340693][ T5318] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 155.364351][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.500687][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.503409][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.541005][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.362244][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.364046][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.402186][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.487389][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.637556][ T5345] loop0: detected capacity change from 0 to 128 [ 159.516754][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.518996][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.549223][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.770894][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.773274][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.775956][ T255] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.777487][ T255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.779414][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.790917][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.806675][ T255] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.808311][ T255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.853768][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.856165][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.874480][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.883680][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.900351][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.992881][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.008330][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.610781][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.787153][ T5359] loop1: detected capacity change from 0 to 1024 [ 160.805044][ T5228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.807864][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.833185][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.835571][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.838082][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.850594][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.858630][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.898934][ T5364] udc-core: couldn't find an available UDC or it's busy [ 160.907278][ T5364] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 160.942997][ T1630] device hsr_slave_0 left promiscuous mode [ 160.953582][ T5359] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.955129][ T5359] EXT4-fs (loop1): Ignoring removed orlov option [ 160.970444][ T1630] device hsr_slave_1 left promiscuous mode [ 160.991310][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 161.050247][ T1630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.051858][ T1630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.054409][ T1630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.056099][ T1630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.061724][ T1630] device bridge_slave_1 left promiscuous mode [ 161.063007][ T1630] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.112286][ T1630] device bridge_slave_0 left promiscuous mode [ 161.113769][ T1630] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.197589][ T5357] loop0: detected capacity change from 0 to 40427 [ 161.209429][ T5371] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 161.230171][ T1630] device veth1_macvtap left promiscuous mode [ 161.231418][ T1630] device veth0_macvtap left promiscuous mode [ 161.232764][ T1630] device veth1_vlan left promiscuous mode [ 161.233974][ T1630] device veth0_vlan left promiscuous mode [ 161.284483][ T5357] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 161.286093][ T5357] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 161.292360][ T5357] F2FS-fs (loop0): invalid crc value [ 161.337924][ T5357] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 161.350175][ T5357] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 161.404108][ T5357] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 161.405800][ T5357] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 161.489398][ T26] audit: type=1326 audit(161.450:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.494048][ T26] audit: type=1326 audit(161.460:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.498816][ T26] audit: type=1326 audit(161.460:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.522450][ T26] audit: type=1326 audit(161.460:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.527531][ T26] audit: type=1326 audit(161.460:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.560598][ T26] audit: type=1326 audit(161.470:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.570978][ T26] audit: type=1326 audit(161.470:36): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.575443][ T26] audit: type=1326 audit(161.470:37): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.608487][ T26] audit: type=1326 audit(161.470:38): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 161.614976][ T26] audit: type=1326 audit(161.470:39): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a7789a8 code=0x7ffc0000 [ 162.865714][ T5396] loop3: detected capacity change from 0 to 512 [ 162.951315][ T5396] EXT4-fs (loop3): 1 orphan inode deleted [ 162.960081][ T5396] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 163.058892][ T1630] team0 (unregistering): Port device team_slave_1 removed [ 163.171889][ T1630] team0 (unregistering): Port device team_slave_0 removed [ 163.197270][ T5404] loop0: detected capacity change from 0 to 256 [ 163.219507][ T5404] FAT-fs (loop0): Unrecognized mount option "errors=re" or missing value [ 163.227451][ T1630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.236779][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 165.239014][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 165.369224][ T1630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.504999][ T5411] loop3: detected capacity change from 0 to 256 [ 166.706091][ T1630] bond0 (unregistering): Released all slaves [ 167.884059][ T5432] loop4: detected capacity change from 0 to 512 [ 167.974633][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.976427][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.990716][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.033268][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.035938][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.065796][ T5228] device veth0_vlan entered promiscuous mode [ 168.071013][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.073453][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.076277][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.078959][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.087941][ T5228] device veth1_vlan entered promiscuous mode [ 168.106214][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.108498][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.119343][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.066365][ T5434] loop3: detected capacity change from 0 to 2048 [ 169.089130][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.109158][ T5439] loop1: detected capacity change from 0 to 512 [ 169.117883][ T5228] device veth0_macvtap entered promiscuous mode [ 169.123970][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.129660][ T5432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.137290][ T5228] device veth1_macvtap entered promiscuous mode [ 169.143630][ T5434] Alternate GPT is invalid, using primary GPT. [ 169.145227][ T5434] loop3: p1 p2 p3 [ 169.173264][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.175328][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.177442][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.242440][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.244739][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.246906][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.261489][ T4034] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /58/file0: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 169.269460][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.279520][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.303576][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.319549][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.320647][ T4034] __quota_error: 3 callbacks suppressed [ 169.320661][ T4034] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 169.323770][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.325305][ T4034] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 169.329066][ T4034] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz-executor: Failed to acquire dquot type 0 [ 169.341305][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.350648][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.355393][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.361853][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.366378][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.373267][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.378263][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.384729][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.409985][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.411715][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.424881][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.492625][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.494516][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.496326][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.498132][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.558162][ T5442] loop1: detected capacity change from 0 to 512 [ 169.662615][ T5442] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 169.662615][ T5442] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 169.662615][ T5442] [ 169.738165][ T4034] device syz_tun left promiscuous mode [ 169.740765][ T4034] bridge0: port 3(syz_tun) entered disabled state [ 169.781458][ T5442] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 170.712453][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.714385][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.719689][ T5442] EXT4-fs (loop1): 1 truncate cleaned up [ 170.730573][ T5442] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 170.758085][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.769634][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.780025][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.784032][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.796713][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 170.916910][ T4013] udevd[4013]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 170.966524][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 171.213315][ T4251] udevd[4251]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 171.228901][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 172.113231][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 172.333036][ T5458] loop2: detected capacity change from 0 to 2048 [ 172.413335][ T5458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.736203][ T5472] loop1: detected capacity change from 0 to 512 [ 172.803353][ T5472] EXT4-fs (loop1): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 173.034942][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 174.058059][ T5482] loop3: detected capacity change from 0 to 512 [ 174.148144][ T5460] loop0: detected capacity change from 0 to 40427 [ 174.174742][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.176474][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.179043][ T5462] device bridge_slave_0 entered promiscuous mode [ 174.183961][ T5460] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 174.185903][ T5460] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.192531][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.194641][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.196984][ T5462] device bridge_slave_1 entered promiscuous mode [ 174.199860][ T5460] F2FS-fs (loop0): invalid crc value [ 174.207445][ T5482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.286064][ T5460] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.412754][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.422508][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.470746][ T5460] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.472404][ T5460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 174.538416][ T4023] Bluetooth: hci3: command 0x0409 tx timeout [ 175.542975][ T5462] team0: Port device team_slave_0 added [ 175.549204][ T5462] team0: Port device team_slave_1 added [ 175.622321][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.624017][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.635085][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.648284][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.653545][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.677159][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.932312][ T5462] device hsr_slave_0 entered promiscuous mode [ 175.992346][ T5478] loop1: detected capacity change from 0 to 40427 [ 176.000724][ T5462] device hsr_slave_1 entered promiscuous mode [ 176.946774][ T4071] Bluetooth: hci3: command 0x041b tx timeout [ 176.989932][ T5462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.991525][ T5462] Cannot create hsr debugfs directory [ 177.135923][ T5501] netlink: 576 bytes leftover after parsing attributes in process `syz.1.331'. [ 177.271539][ T5501] udc-core: couldn't find an available UDC or it's busy [ 177.274954][ T5501] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.277628][ T5507] loop0: detected capacity change from 0 to 512 [ 177.381890][ T5507] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 177.635586][ T5518] loop0: detected capacity change from 0 to 2048 [ 177.707606][ T5518] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.334: bad orphan inode 8192 [ 177.714088][ T5518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.982507][ T5462] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.017102][ T5522] loop3: detected capacity change from 0 to 512 [ 178.212507][ T5522] EXT4-fs (loop3): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 179.463064][ T4099] Bluetooth: hci3: command 0x040f tx timeout [ 179.796414][ T5532] serio: Serial port ptm0 [ 179.856365][ T5462] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.893501][ T5462] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.958202][ T1630] tipc: Disabling bearer [ 179.960490][ T1630] tipc: Left network mode [ 179.964124][ T5462] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.963514][ T5541] loop1: detected capacity change from 0 to 256 [ 180.977491][ T5543] udc-core: couldn't find an available UDC or it's busy [ 180.979207][ T5543] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.110532][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.073978][ T26] audit: type=1326 audit(182.030:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.1.341" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8afd69a8 code=0x0 [ 182.475303][ T4099] Bluetooth: hci3: command 0x0419 tx timeout [ 182.534849][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.537368][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.569688][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.697923][ T5462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.709923][ T5462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.788975][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.793354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.795804][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.797450][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.805948][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.808506][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.810903][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.812500][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.815392][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.817899][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.820905][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.824295][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.826526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.836938][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.839332][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.842354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.844790][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.847074][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.849362][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.852073][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.854269][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.858120][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 183.001018][ T5558] loop1: detected capacity change from 0 to 2048 [ 183.044346][ T5554] loop2: detected capacity change from 0 to 2048 [ 184.009016][ T5554] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 184.056742][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.058559][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.067883][ T5558] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.074620][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.159121][ T5554] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 184.170261][ T4055] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.358159][ T5576] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3 [ 184.410236][ T4055] usb 1-1: Using ep0 maxpacket: 32 [ 184.530225][ T4055] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.532075][ T4055] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.533870][ T4055] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.535977][ T4055] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.537985][ T4055] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.560375][ T4055] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.563181][ T4055] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 184.564943][ T4055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.605438][ T4055] usb 1-1: config 0 descriptor?? [ 184.758930][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.762308][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.811800][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.814017][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.816730][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.828076][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.985016][ T5462] device veth0_vlan entered promiscuous mode [ 184.993455][ T5462] device veth1_vlan entered promiscuous mode [ 185.056032][ T4055] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.060202][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.062601][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.080176][ T4055] usb 1-1: USB disconnect, device number 7 [ 185.091731][ T4055] usblp0: removed [ 185.160736][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.163658][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.175384][ T5589] loop1: detected capacity change from 0 to 512 [ 185.184111][ T5589] EXT4-fs (loop1): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 185.229489][ T5462] device veth0_macvtap entered promiscuous mode [ 185.280493][ T5462] device veth1_macvtap entered promiscuous mode [ 185.463029][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.465540][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.474001][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.484940][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.494033][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.500383][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.506579][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.741745][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.120439][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.132362][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.148190][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.154634][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.157361][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.160661][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.166489][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.257262][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.261354][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.340075][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.342450][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.352423][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.360552][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.371828][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.383213][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.397305][ T5462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.414939][ T5593] loop1: detected capacity change from 0 to 512 [ 186.419951][ T5462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.423736][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.428317][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.431456][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.438648][ T5462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.444084][ T5462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.449353][ T5462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.459807][ T5462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.497397][ T5593] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.545122][ T5593] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.349: Directory hole found for htree leaf block 0 [ 186.765356][ T1630] device hsr_slave_0 left promiscuous mode [ 186.850811][ T1630] device hsr_slave_1 left promiscuous mode [ 186.940028][ T1630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.941894][ T1630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.871786][ T5600] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.349: Directory hole found for htree leaf block 0 [ 187.886316][ T1630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.887840][ T1630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.890496][ T1630] device bridge_slave_1 left promiscuous mode [ 187.891889][ T1630] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.961185][ T1630] device bridge_slave_0 left promiscuous mode [ 187.962759][ T1630] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.150134][ T1630] device veth1_macvtap left promiscuous mode [ 188.151545][ T1630] device veth0_macvtap left promiscuous mode [ 188.152864][ T1630] device veth1_vlan left promiscuous mode [ 188.154100][ T1630] device veth0_vlan left promiscuous mode [ 188.196321][ T5603] loop1: detected capacity change from 0 to 512 [ 188.269694][ T5603] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.351: inline data xattr refers to an external xattr inode [ 188.273763][ T5603] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.351: couldn't read orphan inode 12 (err -117) [ 188.290765][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.588624][ T5612] loop3: detected capacity change from 0 to 256 [ 188.935429][ T5615] loop2: detected capacity change from 0 to 256 [ 189.892313][ T26] audit: type=1326 audit(2000000000.760:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.3.355" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x0 [ 190.544839][ T5618] loop3: detected capacity change from 0 to 1024 [ 190.593376][ T1630] team0 (unregistering): Port device team_slave_1 removed [ 190.613763][ T1630] team0 (unregistering): Port device team_slave_0 removed [ 190.660804][ T1630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.669350][ T5618] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 190.704066][ T1630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.228971][ T5631] loop1: detected capacity change from 0 to 512 [ 193.331381][ T5631] EXT4-fs (loop1): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 193.429543][ T1630] bond0 (unregistering): Released all slaves [ 194.398155][ T5637] fuse: Unknown parameter 'roo' [ 196.292534][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.294630][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.322474][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.345172][ T5651] loop0: detected capacity change from 0 to 256 [ 196.409685][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.434694][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.453841][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.490029][ T5651] FAT-fs (loop0): bogus number of FAT sectors [ 196.491361][ T5651] FAT-fs (loop0): Can't find a valid FAT filesystem [ 196.513569][ T5653] loop2: detected capacity change from 0 to 256 [ 197.854981][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.856371][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.191002][ T5665] loop2: detected capacity change from 0 to 1024 [ 199.452758][ T5665] EXT4-fs (loop2): Test dummy encryption mode enabled [ 199.454483][ T5665] EXT4-fs (loop2): Ignoring removed orlov option [ 199.481506][ T5665] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,noquota,data_err=abort,. Quota mode: writeback. [ 199.775099][ T5677] tipc: Started in network mode [ 199.790322][ T5677] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 199.870371][ T5677] tipc: Enabled bearer , priority 10 [ 199.879565][ T26] audit: type=1326 audit(2000000011.350:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5672 comm="syz.4.370" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8415d9a8 code=0x0 [ 200.141124][ T5681] loop0: detected capacity change from 0 to 512 [ 201.169956][ T5686] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 201.214401][ T4023] tipc: Node number set to 4269801494 [ 201.975911][ T5681] EXT4-fs (loop0): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 203.503471][ T5701] loop3: detected capacity change from 0 to 256 [ 203.703207][ T5704] loop1: detected capacity change from 0 to 128 [ 208.081280][ T26] audit: type=1326 audit(2000000019.560:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.106744][ T26] audit: type=1326 audit(2000000019.580:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.140143][ T26] audit: type=1326 audit(2000000019.610:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.144651][ T26] audit: type=1326 audit(2000000019.610:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.167714][ T26] audit: type=1326 audit(2000000019.610:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.219996][ T26] audit: type=1326 audit(2000000019.610:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.250176][ T26] audit: type=1326 audit(2000000019.610:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.254881][ T26] audit: type=1326 audit(2000000019.620:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=109 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.294582][ T5739] loop3: detected capacity change from 0 to 256 [ 208.300233][ T26] audit: type=1326 audit(2000000019.620:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.2.385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x7ffc0000 [ 208.571264][ T5745] loop4: detected capacity change from 0 to 1024 [ 208.573291][ T5745] hfsplus: unable to parse mount options [ 210.026658][ T5760] loop4: detected capacity change from 0 to 128 [ 210.964535][ T5767] netlink: 'syz.4.396': attribute type 29 has an invalid length. [ 210.966634][ T5767] netlink: 'syz.4.396': attribute type 29 has an invalid length. [ 211.003471][ T5767] netlink: 'syz.4.396': attribute type 29 has an invalid length. [ 211.214545][ T5772] netlink: 'syz.1.398': attribute type 29 has an invalid length. [ 211.238786][ T5772] netlink: 'syz.1.398': attribute type 29 has an invalid length. [ 212.186269][ T5776] netlink: 'syz.1.398': attribute type 29 has an invalid length. [ 212.643910][ T5784] loop2: detected capacity change from 0 to 1024 [ 212.692345][ T5786] tun0: tun_chr_ioctl cmd 1074025677 [ 212.694007][ T5786] tun0: linktype set to 805 [ 212.701105][ T5784] hfsplus: unable to parse mount options [ 212.744442][ T5788] loop4: detected capacity change from 0 to 256 [ 213.868830][ T26] audit: type=1326 audit(2000000025.330:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5787 comm="syz.4.404" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8415d9a8 code=0x0 [ 214.303416][ T5808] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 214.536969][ T5808] device veth0_vlan left promiscuous mode [ 215.516639][ T5808] device veth0_vlan entered promiscuous mode [ 215.555989][ T5808] team0: Device veth0_vlan failed to register rx_handler [ 215.869445][ T5813] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 216.850999][ T5819] fuse: Unknown parameter 'roo00000000000000000000' [ 216.943604][ T5822] loop4: detected capacity change from 0 to 1024 [ 217.117143][ T5826] loop2: detected capacity change from 0 to 256 [ 217.212121][ T5822] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000004000000,debug_want_extra_isize=0x000000000000005e,lazytime,barrier,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 219.563354][ T26] audit: type=1326 audit(2000000030.050:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5825 comm="syz.2.418" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff876659a8 code=0x0 [ 219.593055][ T5840] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 219.594951][ T5840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.421'. [ 219.613931][ T5840] bridge0: port 3(macvlan1) entered blocking state [ 219.622403][ T5840] bridge0: port 3(macvlan1) entered disabled state [ 219.641453][ T5840] device macvlan1 entered promiscuous mode [ 219.645898][ T5840] bridge0: port 3(macvlan1) entered blocking state [ 219.647801][ T5840] bridge0: port 3(macvlan1) entered forwarding state [ 219.799367][ T5847] loop0: detected capacity change from 0 to 512 [ 219.943355][ T5854] loop3: detected capacity change from 0 to 512 [ 219.952367][ T5847] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.922560][ T5847] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.425: invalid block [ 220.925348][ T5854] EXT4-fs (loop3): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 220.927820][ T5847] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.425: couldn't read orphan inode 11 (err -117) [ 220.938498][ T5847] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 221.165039][ T5862] fuse: Unknown parameter 'roo00000000000000000000' [ 222.853964][ T5873] loop1: detected capacity change from 0 to 256 [ 223.268724][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 224.242084][ T26] audit: type=1326 audit(2000000035.710:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.1.432" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8afd69a8 code=0x0 [ 225.468217][ T5903] loop0: detected capacity change from 0 to 512 [ 225.630130][ T5903] EXT4-fs (loop0): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 225.641902][ T5911] mmap: syz.3.447 (5911) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 226.790100][ T5922] udc-core: couldn't find an available UDC or it's busy [ 226.791692][ T5922] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 227.360890][ T5932] sctp: [Deprecated]: syz.0.452 (pid 5932) Use of int in max_burst socket option. [ 227.360890][ T5932] Use struct sctp_assoc_value instead [ 228.319416][ T5936] loop3: detected capacity change from 0 to 256 [ 229.717531][ T26] audit: type=1326 audit(2000000041.190:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.3.453" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x0 [ 230.487722][ T4055] Bluetooth: hci0: command 0x0406 tx timeout [ 230.488983][ T5957] loop4: detected capacity change from 0 to 2048 [ 231.286198][ T5957] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 231.319049][ T4035] udevd[4035]: incorrect nilfs2 checksum on /dev/loop4 [ 231.385197][ T5967] loop3: detected capacity change from 0 to 512 [ 231.392614][ T5962] can: request_module (can-proto-3) failed. [ 231.416600][ T5970] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.427760][ T5967] EXT4-fs (loop3): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 231.548013][ T5957] udc-core: couldn't find an available UDC or it's busy [ 231.549535][ T5957] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.630222][ T5957] fuse: Unknown parameter '00000000000000000000' [ 232.902030][ T4069] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.452230][ T5957] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 233.458789][ T5957] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 233.473929][ T5957] Remounting filesystem read-only [ 233.475069][ T5957] NILFS (loop4): error -5 truncating bmap (ino=15) [ 233.634063][ T4069] usb 1-1: Using ep0 maxpacket: 16 [ 233.713514][ T5982] udc-core: couldn't find an available UDC or it's busy [ 233.714991][ T5982] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.771206][ T4069] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.950289][ T4069] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 233.952362][ T4069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.954188][ T4069] usb 1-1: Product: syz [ 233.955107][ T4069] usb 1-1: Manufacturer: syz [ 233.956214][ T4069] usb 1-1: SerialNumber: syz [ 233.978916][ T4069] usb 1-1: config 0 descriptor?? [ 234.048570][ T5462] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 234.051299][ T5462] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.070138][ T5462] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.072027][ T5462] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 234.073919][ T5462] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 234.075830][ T5462] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 234.078164][ T5462] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 234.079662][ T5462] NILFS (loop4): discard dirty block: blocknr=22, size=1024 [ 234.101260][ T5462] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.103093][ T5462] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.110748][ T5462] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.261394][ T5989] udc-core: couldn't find an available UDC or it's busy [ 234.262956][ T5989] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 234.271503][ T5991] loop3: detected capacity change from 0 to 256 [ 234.289740][ T5993] udc-core: couldn't find an available UDC or it's busy [ 234.292402][ T5993] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 234.315908][ T4023] usb 1-1: USB disconnect, device number 8 [ 234.562694][ T5996] loop2: detected capacity change from 0 to 2048 [ 234.568718][ T5996] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.845963][ T26] audit: type=1326 audit(2000000046.310:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.472" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x0 [ 235.517501][ T5998] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.565769][ T6000] loop3: detected capacity change from 0 to 256 [ 235.654907][ T6006] loop1: detected capacity change from 0 to 512 [ 235.690319][ T6006] EXT4-fs (loop1): Unrecognized mount option "nojournal_checksum"dax=always" or missing value [ 237.899962][ T4070] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 237.914454][ T6020] loop1: detected capacity change from 0 to 2048 [ 237.997936][ T6022] loop4: detected capacity change from 0 to 2048 [ 238.027088][ T6020] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.056256][ T6022] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 238.060163][ T6022] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 238.064860][ T6027] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.092016][ T6020] udc-core: couldn't find an available UDC or it's busy [ 238.093579][ T6020] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 238.101373][ T6022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.109384][ T6029] loop3: detected capacity change from 0 to 256 [ 238.122091][ T6022] ================================================================== [ 238.124023][ T6022] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x4c0/0x668 [ 238.125688][ T6022] Write of size 4 at addr ffff0000d0aea3f0 by task syz.4.483/6022 [ 238.127406][ T6022] [ 238.127873][ T6022] CPU: 1 PID: 6022 Comm: syz.4.483 Not tainted 5.15.167-syzkaller #0 [ 238.129746][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 238.131989][ T6022] Call trace: [ 238.132633][ T6022] dump_backtrace+0x0/0x530 [ 238.133579][ T6022] show_stack+0x2c/0x3c [ 238.134494][ T6022] dump_stack_lvl+0x108/0x170 [ 238.135538][ T6022] print_address_description+0x7c/0x3f0 [ 238.136785][ T6022] kasan_report+0x174/0x1e4 [ 238.137840][ T6022] __asan_report_store_n_noabort+0x40/0x4c [ 238.139046][ T6022] udf_write_aext+0x4c0/0x668 [ 238.140069][ T4070] usb 1-1: Using ep0 maxpacket: 32 [ 238.140212][ T6022] udf_add_entry+0x11e0/0x28b0 [ 238.142370][ T6022] udf_mkdir+0x158/0x7e0 [ 238.143276][ T6022] vfs_mkdir+0x334/0x4e4 [ 238.144118][ T6022] do_mkdirat+0x20c/0x610 [ 238.145083][ T6022] __arm64_sys_mkdirat+0x90/0xa8 [ 238.146160][ T6022] invoke_syscall+0x98/0x2b8 [ 238.147174][ T6022] el0_svc_common+0x138/0x258 [ 238.148189][ T6022] do_el0_svc+0x58/0x14c [ 238.149045][ T6022] el0_svc+0x7c/0x1f0 [ 238.149875][ T6022] el0t_64_sync_handler+0x84/0xe4 [ 238.150943][ T6022] el0t_64_sync+0x1a0/0x1a4 [ 238.151916][ T6022] [ 238.152413][ T6022] Allocated by task 14: [ 238.153280][ T6022] ____kasan_kmalloc+0xbc/0xfc [ 238.154367][ T6022] __kasan_kmalloc+0x10/0x1c [ 238.155402][ T6022] __kmalloc_node_track_caller+0x234/0x448 [ 238.156588][ T6022] kmalloc_reserve+0xe8/0x270 [ 238.157527][ T6022] __alloc_skb+0x1a4/0x584 [ 238.158498][ T6022] __netdev_alloc_skb+0xb8/0x3c8 [ 238.159593][ T6022] __ieee80211_beacon_get+0x940/0x1b54 [ 238.160727][ T6022] ieee80211_beacon_get_tim+0xb8/0x840 [ 238.162025][ T6022] mac80211_hwsim_beacon_tx+0x110/0x7d4 [ 238.163142][ T6022] __iterate_interfaces+0x204/0x484 [ 238.164252][ T6022] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 238.165894][ T6022] mac80211_hwsim_beacon+0xa0/0x184 [ 238.166943][ T6022] __hrtimer_run_queues+0x484/0xca4 [ 238.167986][ T6022] hrtimer_run_softirq+0x158/0x21c [ 238.168995][ T6022] handle_softirqs+0x384/0xdbc [ 238.170010][ T6022] run_ksoftirqd+0x6c/0x29c [ 238.171059][ T6022] smpboot_thread_fn+0x4b0/0x920 [ 238.172184][ T6022] kthread+0x37c/0x45c [ 238.173006][ T6022] ret_from_fork+0x10/0x20 [ 238.173965][ T6022] [ 238.174422][ T6022] The buggy address belongs to the object at ffff0000d0aea000 [ 238.174422][ T6022] which belongs to the cache kmalloc-512 of size 512 [ 238.177350][ T6022] The buggy address is located 496 bytes to the right of [ 238.177350][ T6022] 512-byte region [ffff0000d0aea000, ffff0000d0aea200) [ 238.180548][ T6022] The buggy address belongs to the page: [ 238.181750][ T6022] page:00000000fbd7e62a refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110ae8 [ 238.183853][ T6022] head:00000000fbd7e62a order:2 compound_mapcount:0 compound_pincount:0 [ 238.185616][ T6022] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 238.187375][ T6022] raw: 05ffc00000010200 fffffc00038ae500 0000000600000006 ffff0000c0002600 [ 238.189305][ T6022] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 238.191099][ T6022] page dumped because: kasan: bad access detected [ 238.192464][ T6022] [ 238.192978][ T6022] Memory state around the buggy address: [ 238.194254][ T6022] ffff0000d0aea280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 238.196028][ T6022] ffff0000d0aea300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 238.197719][ T6022] >ffff0000d0aea380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 238.199596][ T6022] ^ [ 238.201155][ T6022] ffff0000d0aea400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 238.202946][ T6022] ffff0000d0aea480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 238.204711][ T6022] ================================================================== [ 238.206529][ T6022] Disabling lock debugging due to kernel taint [ 238.262566][ T4070] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 238.380184][ T6031] device syzkaller0 entered promiscuous mode [ 238.816404][ T4070] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.818870][ T4070] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.821667][ T26] audit: type=1326 audit(2000000050.300:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.485" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7789a8 code=0x0 [ 238.825171][ T4070] usb 1-1: Product: syz [ 238.827282][ T4070] usb 1-1: Manufacturer: syz [ 238.831066][ T4070] usb 1-1: SerialNumber: syz [ 238.837117][ T4070] usb 1-1: config 0 descriptor?? [ 238.871021][ T6013] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.163336][ T6011] usb 1-1: USB disconnect, device number 9