last executing test programs: 54.944016944s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000740)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$incfs_id(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000680), 0x0, 0x0, 0x0) 54.678841474s ago: executing program 4: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x0, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff0000050245", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 51.224241435s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@norecovery}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0x6000}}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") 50.74011008s ago: executing program 4: eventfd(0x0) r0 = socket$inet6(0xa, 0x806, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 50.306466986s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000101d9e80000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 50.203420032s ago: executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x6450}, 0x13, 0x0) fchdir(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x2}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}}], 0x4000070, 0x8000) recvmmsg(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000380)=""/8, 0x8}, {&(0x7f0000000ec0)=""/253, 0xfd}, {0x0}, {&(0x7f00000006c0)=""/3, 0x3}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000a00)=""/79, 0x4f}, {0x0}, {&(0x7f0000000b80)=""/252, 0xfc}], 0x8}}, {{0x0, 0x0, &(0x7f0000000700)}}, {{&(0x7f00000005c0)=@caif=@rfm, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000016c0)}}], 0x6, 0x10020, 0x0) 49.014201965s ago: executing program 2: r0 = socket(0x1e, 0x4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 48.91618142s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 48.739171787s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/155, 0x9b) 47.74768963s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340), 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000005f40)={0x0, 0x20000000, 0x3, 0x4}, &(0x7f0000005e80)=0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='percpu_free_percpu\x00', r4}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) setsockopt(r1, 0x0, 0x82, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x26, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000000)='net/udp\x00') syz_emit_ethernet(0x5f, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x29, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}, {"e3"}}}}}}}, 0x0) 44.875158241s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/155, 0x9b) 43.643865s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000d00850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 43.410348146s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x39, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}]}]}]}, 0x2c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) setrlimit(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_split\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x3, 0x42400) chdir(0x0) 43.213025787s ago: executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000940)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$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") 42.644010364s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='ext4_writepages_result\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x2000) 42.515410814s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYBLOB, @ANYRES16=r0, @ANYBLOB="05000a00000000000500040005000000050005008000000008000a00", @ANYRES16, @ANYRESHEX=r0, @ANYBLOB="669518c9a3cffa0dc6caa463722d2d5aaef56e0ad80657ab04cc4dc9e8c926f30481526ae3276e04a2aa22c57d0df9447ff5a1f0ba05328d4ecf8926aa43db209d6ceb39d0c42e034e30d00ad2148da903e6f83445956ae0cffd2ad97d33c9b2a41a42fa430a75f0170017171fa042467cbb8b6cd32858651bd9a7cbd2426245562ceadc1f93b2da94c348ad8f23a040820b642e6ffd97d20f9c0d32d2081b15e21d83d3dc723ded5b1d65"], 0x70}}, 0x0) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000040)={0x2000, 0xac, 0x8}, 0x18) futex_waitv(&(0x7f0000001cc0)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000044001a80400004803c00098008"], 0x64}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000800), 0x4) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0, 0x4, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000200)={0x0, 0x0, r5}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0xfffffffa, 0xab}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x0, 0x4, 0x1}, {}, {0x6, 0x40}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000240003000000000000000000000000000000000000000000000000000000000000000000080008800400000008000100", @ANYRES32, @ANYBLOB="4ee9aa192f4327619e5c11d10384858beee7dc72f4c1d18e"], 0x48}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) 40.740017527s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) add_key(&(0x7f00000001c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 39.637425936s ago: executing program 3: syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000004500)=ANY=[], 0x1, 0x205, &(0x7f0000000640)="$eJzsmb+LE0EUx78zu5vEQwQbC5srPPBEb7O7Ubnm0BMsBUFFLYO3HqdzF0lWSAKCwcbG0kKwtbG0tLLwL7DVQgXBJqWdsDI/djPR3ZiEYArfB27uO7Nv5s17s/OKDQiC+G/5+uXH52eXNq+fAXAYa6ia8e/OyIZb9p9ePDz9fOvyyzcfX70/OPLorR5l+XOp0nR6/zUA77YdJGCuHhmfvWZtwWjcAMcpo2+CwdfyZ6rQnRgMt43NPUu3DhkhYv9OS+zc3RNxIJtQNpFsGrZ/uanhgGHH7FV6YNbzTq9/vylE3P5deGnm549Hs4pJ+VP72+bYQpa9NJXJuvX0yUD2TW4QgOf5C8ERmuw3wHDNjG+iCt/3Rymx4j/ujtZ3yuJni4h2IeK1Ekc3ZpoF4OKcTrM7UmizOv1J/6P8MPZXm+yeLP0obeEtZB02/tK6Ql7ofOTYMKuB9qxvS499DpEFUis5yg8rQlwpn+6VVzctKgWJEvEFZLfJ1A9Z2U9a9cmFm9ePerL/oN7p9Tf29pu78W58EEWN88HZIDgX1VUh0u2E+ldT9WnFWt8rsa2wCrrNJGmHXSBph3k/0q11D/MSx1X941g/ofvyVVFhV4t9MPPH1X+p1p1iy8elMREEQRAEQRAEQRAEQRAEQRSzCgb9S1jKzAfRIqKr6gvlrwAAAP//4x1XFw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 39.48674361s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/155, 0x9b) 39.150604682s ago: executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@usrjquota_path={'usrjquota', 0x3d, './mnt'}}, {@lazytime}]}, 0x0, 0x236, &(0x7f0000000300)="$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") sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) 33.942163242s ago: executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d24"], 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 32.162848175s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) 30.720409927s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) add_key(&(0x7f00000001c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 30.057802459s ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) 30.025060944s ago: executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 22.57113371s ago: executing program 2: r0 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLERRORu(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = semget$private(0x0, 0x4, 0x0) semop(r3, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) rt_sigreturn() pipe2(&(0x7f0000002440)={0xffffffffffffffff}, 0x0) syz_fuse_handle_req(r4, &(0x7f0000002480)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 13.957733284s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf32(r1, 0x0, 0x0) 12.48805123s ago: executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000980)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\x7f\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1$)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\b\x00\x00\x00\x00\x00\x00\x00\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1 1 [ 976.708831][ T7044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.720731][ T7044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.751318][ T7044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.811449][ T7044] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 976.850304][ T7044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 977.138271][ T4184] usb 3-1: USB disconnect, device number 24 [ 977.260096][T11911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.309352][T12657] loop0: detected capacity change from 0 to 2048 [ 977.353316][T12643] geneve1 speed is unknown, defaulting to 1000 [ 977.575988][T12661] loop2: detected capacity change from 0 to 512 [ 978.314238][ T9507] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 978.346259][ T3647] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 978.397308][T12661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 978.408032][T12661] ext4 filesystem being mounted at /root/syzkaller-testdir2585649716/syzkaller.NAZTiM/86/file0 supports timestamps until 2038 (0x7fffffff) [ 978.454157][T12658] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 978.473522][T12658] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error [ 978.488216][T12658] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 978.511789][T12658] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 978.767228][T10645] EXT4-fs (loop2): unmounting filesystem. [ 978.784380][ T9507] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.820862][ T9507] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.924590][ T9507] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 978.927201][T12676] loop1: detected capacity change from 0 to 2048 [ 978.981844][ T9507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 979.013134][ T9507] usb 4-1: SerialNumber: syz [ 979.074903][T12678] geneve1 speed is unknown, defaulting to 1000 [ 979.092697][ T3647] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 979.134376][ T3586] Bluetooth: hci0: command tx timeout [ 979.367039][ T9507] usb 4-1: 0:2 : does not exist [ 979.438207][ T9507] usb 4-1: USB disconnect, device number 24 [ 979.484434][T12643] chnl_net:caif_netlink_parms(): no params data found [ 979.885735][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.893054][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.927847][T12643] device bridge_slave_0 entered promiscuous mode [ 979.971230][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.994210][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.019800][T12643] device bridge_slave_1 entered promiscuous mode [ 980.046510][T12683] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 980.325562][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 980.371643][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.421653][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 980.449171][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.460258][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 980.472572][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.483378][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 980.495121][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.505521][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 980.517223][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.532301][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 980.552886][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.583557][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 980.604212][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.624186][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 980.634039][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.690637][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan6 [ 980.730692][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.764128][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 980.773993][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.807425][T12703] batman_adv: batadv0: Adding interface: ipvlan5 [ 980.813816][T12703] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.914736][T12703] batman_adv: batadv0: Interface activated: ipvlan5 [ 980.934627][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.982869][T12710] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 980.994678][T12708] autofs4:pid:12708:autofs_fill_super: called with bogus options [ 981.020818][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 981.022322][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.197853][T12643] team0: Port device team_slave_0 added [ 981.209778][T12643] team0: Port device team_slave_1 added [ 981.234545][ T3586] Bluetooth: hci0: command tx timeout [ 981.364380][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.377020][T12716] autofs4:pid:12716:autofs_fill_super: called with bogus options [ 981.392209][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.491312][T12721] loop1: detected capacity change from 0 to 512 [ 981.567810][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.588697][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.596094][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.960002][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.413927][T12721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 982.423263][T12721] ext4 filesystem being mounted at /root/syzkaller-testdir1194622995/syzkaller.hmKYdZ/14/file0 supports timestamps until 2038 (0x7fffffff) [ 982.460196][T12719] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 982.476835][T12719] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz-executor.1: mark_inode_dirty error [ 982.491517][T12719] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz-executor.1: corrupted inode contents [ 982.506547][T12719] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 982.517589][T12729] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 982.736696][T12643] device hsr_slave_0 entered promiscuous mode [ 982.752807][T12113] EXT4-fs (loop1): unmounting filesystem. [ 982.831854][T12643] device hsr_slave_1 entered promiscuous mode [ 982.894569][T12643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.902199][T12643] Cannot create hsr debugfs directory [ 982.966884][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 982.977880][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.987968][ T4184] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 983.000091][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 983.013816][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.038237][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 983.054165][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.070537][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 983.080605][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.097265][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 983.110678][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.124669][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 983.141489][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.161002][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 983.171101][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.187959][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 983.200390][ T4710] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 983.212774][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.224179][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan6 [ 983.244229][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.260135][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 983.271022][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.274584][ T4184] usb 1-1: Using ep0 maxpacket: 32 [ 983.281294][T12742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 983.296762][T12742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.304201][ T7044] Bluetooth: hci0: command tx timeout [ 983.311516][T12742] batman_adv: batadv0: Adding interface: ipvlan6 [ 983.321184][T12742] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.352459][T12742] batman_adv: batadv0: Interface activated: ipvlan6 [ 983.605415][T11911] device hsr_slave_0 left promiscuous mode [ 983.615742][ T4184] usb 1-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 983.641865][ T4184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.644190][T11911] device hsr_slave_1 left promiscuous mode [ 983.650419][ T4710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.676004][T11911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.680934][ T4184] usb 1-1: Product: syz [ 983.683500][T11911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.691046][ T4184] usb 1-1: Manufacturer: syz [ 983.700093][ T4710] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.719775][ T4184] usb 1-1: SerialNumber: syz [ 983.741435][ T4184] usb 1-1: config 0 descriptor?? [ 983.766643][T12758] autofs4:pid:12758:autofs_fill_super: called with bogus options [ 983.786018][ T4184] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 983.799114][T11911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.799211][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 983.815120][T11911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.821705][ T4710] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 983.842234][ T4710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 983.862630][ T4710] usb 2-1: SerialNumber: syz [ 983.871341][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 983.904375][T11911] device bridge_slave_1 left promiscuous mode [ 983.910661][T11911] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.910993][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 983.940482][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 983.960900][T11911] device bridge_slave_0 left promiscuous mode [ 983.969637][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.010816][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 984.027183][T11911] device veth1_macvtap left promiscuous mode [ 984.035208][T11911] device veth0_macvtap left promiscuous mode [ 984.052973][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 984.064861][T11911] device veth1_vlan left promiscuous mode [ 984.083694][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 984.095151][T11911] device veth0_vlan left promiscuous mode [ 984.123241][ T4184] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 984.179350][ T4710] usb 2-1: 0:2 : does not exist [ 984.187674][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 984.213535][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 984.249112][ T4710] usb 2-1: USB disconnect, device number 20 [ 984.283086][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 984.329960][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 984.353996][ T4184] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 984.399631][ T4184] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 984.451003][ T4184] usb 1-1: USB disconnect, device number 18 [ 984.515485][ T4184] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 984.562288][ T4184] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 984.583367][ T4184] keyspan 1-1:0.0: device disconnected [ 984.748094][T12770] loop3: detected capacity change from 0 to 2048 [ 984.970912][T12775] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 985.136874][T12775] rdma_rxe: rxe_register_device failed with error -23 [ 985.174392][T12775] rdma_rxe: failed to add geneve1 [ 985.260010][T11911] team0 (unregistering): Port device team_slave_1 removed [ 985.359506][T11911] team0 (unregistering): Port device team_slave_0 removed [ 985.374255][ T7044] Bluetooth: hci0: command tx timeout [ 985.429943][T11911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.577857][T11911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.851480][T11911] bond0 (unregistering): Released all slaves [ 987.423952][T12643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 987.490811][T12643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 987.546211][T12643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 987.639006][T12643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 987.666498][T12803] autofs4:pid:12803:autofs_fill_super: called with bogus options [ 987.960370][T12807] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 988.021298][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.092507][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 988.115454][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 988.162033][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.211057][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 988.231839][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.261196][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.268562][ T5580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.345006][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 988.362118][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 988.392233][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.418048][ T3615] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.425200][ T3615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.470947][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 988.506410][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 988.573692][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 988.586133][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 988.605765][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 988.674633][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 988.697335][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 988.736607][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 988.940997][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 988.957509][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.978465][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 989.040727][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 989.127957][ T27] audit: type=1804 audit(1718924931.409:172): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4276758472/syzkaller.1YRJuX/163/file0" dev="sda1" ino=1955 res=1 errno=0 [ 990.594343][ T9507] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 990.625700][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 990.633510][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 990.682292][T12643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.024518][ T9507] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.064438][ T9507] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.333103][ T9507] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 991.342701][ T9507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 991.352247][ T9507] usb 2-1: SerialNumber: syz [ 991.404202][ T4184] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 991.505130][T12863] loop0: detected capacity change from 0 to 512 [ 991.644235][ T4184] usb 3-1: Using ep0 maxpacket: 32 [ 991.693997][ T9507] usb 2-1: 0:2 : does not exist [ 991.784740][T12863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 991.794131][T12863] ext4 filesystem being mounted at /root/syzkaller-testdir219053944/syzkaller.etqI0w/399/file0 supports timestamps until 2038 (0x7fffffff) [ 991.873643][T12863] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 991.889647][T12863] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor.0: mark_inode_dirty error [ 991.905798][T12863] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 991.919910][T12863] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 992.064664][ T4184] usb 3-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 992.218299][ T4184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.226705][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 992.227682][ T4184] usb 3-1: Product: syz [ 992.242873][ T9507] usb 2-1: USB disconnect, device number 21 [ 992.249583][ T4184] usb 3-1: Manufacturer: syz [ 992.265600][ T4184] usb 3-1: SerialNumber: syz [ 992.307076][ T4184] usb 3-1: config 0 descriptor?? [ 992.315167][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.346562][ T4184] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 992.377126][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 992.409884][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 992.444847][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 992.468661][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 992.498604][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 992.544350][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 992.587017][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 992.626722][ T4184] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 992.632372][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 992.667628][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 992.676842][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 992.703534][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 992.732242][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 992.754718][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 992.763260][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 992.773648][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 992.800087][ T4184] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 992.828236][T12643] device veth0_vlan entered promiscuous mode [ 992.832075][ T4184] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 992.885230][ T4184] usb 3-1: USB disconnect, device number 25 [ 992.893904][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 992.908263][ T4184] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 992.913235][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.931194][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.948373][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 992.979390][T12643] device veth1_vlan entered promiscuous mode [ 992.997060][ T4184] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 993.063838][ T4184] keyspan 3-1:0.0: device disconnected [ 993.068732][T12885] loop3: detected capacity change from 0 to 512 [ 993.125892][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 993.146906][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 993.190093][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 993.220248][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 993.242598][T12643] device veth0_macvtap entered promiscuous mode [ 993.273404][T12643] device veth1_macvtap entered promiscuous mode [ 993.348385][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.387765][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.444291][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.474090][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.483981][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.534591][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.574631][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.604157][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.627385][T12643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.651219][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 993.664798][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 993.676180][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 993.730348][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 993.762321][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.786555][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.817256][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.852622][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.873168][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.894165][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.917645][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.958716][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.274241][T12643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.376278][T12906] loop2: detected capacity change from 0 to 512 [ 994.384789][T12906] ext4: Unknown parameter 'measure' [ 995.932913][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.962258][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.486843][T12643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.533815][T12643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.577975][T12643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.624229][T12643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.249851][T12918] loop0: detected capacity change from 0 to 512 [ 997.465131][T12924] autofs4:pid:12924:autofs_fill_super: called with bogus options [ 997.488376][T12918] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 997.497571][T12918] ext4 filesystem being mounted at /root/syzkaller-testdir219053944/syzkaller.etqI0w/401/file0 supports timestamps until 2038 (0x7fffffff) [ 997.529211][T12918] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 997.542588][T12918] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor.0: mark_inode_dirty error [ 997.555130][T12918] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 997.567725][T12918] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 997.622044][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.635833][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.665930][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 997.828356][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.848454][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.979898][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 998.269067][T12933] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 998.951555][T12933] siw: device registration error -19 [ 999.244304][ T5582] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 999.289660][T12942] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.4'. [ 999.327254][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 999.469857][T12942] rdma_rxe: rxe_register_device failed with error -23 [ 999.844438][ T5582] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.412952][ T5582] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.432715][T12942] rdma_rxe: failed to add geneve1 [ 1000.524537][ T5582] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1000.593786][ T5582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1000.622727][ T5582] usb 2-1: SerialNumber: syz [ 1000.861410][T12954] geneve1 speed is unknown, defaulting to 1000 [ 1000.916451][ T5582] usb 2-1: 0:2 : does not exist [ 1001.002600][ T5582] usb 2-1: USB disconnect, device number 22 [ 1001.110312][T12969] loop0: detected capacity change from 0 to 512 [ 1001.997748][T12975] loop1: detected capacity change from 0 to 512 [ 1002.006112][T12975] ext4: Unknown parameter 'measure' [ 1005.988395][T12978] loop2: detected capacity change from 0 to 512 [ 1006.090579][T12978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1006.099609][T12978] ext4 filesystem being mounted at /root/syzkaller-testdir2585649716/syzkaller.NAZTiM/99/file0 supports timestamps until 2038 (0x7fffffff) [ 1006.121886][T12978] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 1006.134646][T12978] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error [ 1006.146898][T12978] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 1006.159498][T12978] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 1006.237433][ T3647] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.481784][T10645] EXT4-fs (loop2): unmounting filesystem. [ 1006.702354][T12961] geneve1 speed is unknown, defaulting to 1000 [ 1006.930973][T12995] loop1: detected capacity change from 0 to 64 [ 1006.945087][T12992] autofs4:pid:12992:autofs_fill_super: called with bogus options [ 1008.513229][T13005] loop3: detected capacity change from 0 to 512 [ 1008.583567][T13007] loop0: detected capacity change from 0 to 1024 [ 1008.657832][T13007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1008.696878][T10349] kworker/u4:11: attempt to access beyond end of device [ 1008.696878][T10349] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1008.711099][T10349] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 1008.726589][T10349] kworker/u4:11: attempt to access beyond end of device [ 1008.726589][T10349] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1008.744470][T13007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1008.837315][T10349] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 1008.883768][T10349] kworker/u4:11: attempt to access beyond end of device [ 1008.883768][T10349] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1008.950031][T10349] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 1008.950536][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 1008.959693][T10349] kworker/u4:11: attempt to access beyond end of device [ 1008.959693][T10349] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1008.978620][T10349] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 1008.997362][T10349] kworker/u4:11: attempt to access beyond end of device [ 1008.997362][T10349] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1009.031395][ T4710] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1009.064334][T10349] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 1009.083307][T10349] kworker/u4:11: attempt to access beyond end of device [ 1009.083307][T10349] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1009.114156][T10349] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 1009.132910][T10349] kworker/u4:11: attempt to access beyond end of device [ 1009.132910][T10349] loop1: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1009.156799][T10349] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 1009.176022][T10349] kworker/u4:11: attempt to access beyond end of device [ 1009.176022][T10349] loop1: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1009.219355][T10349] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 1009.299822][ T4710] usb 5-1: Using ep0 maxpacket: 32 [ 1009.324529][T10349] kworker/u4:11: attempt to access beyond end of device [ 1009.324529][T10349] loop1: rw=1, sector=78, nr_sectors = 89 limit=64 [ 1010.244353][ T4710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.329540][T13020] loop2: detected capacity change from 0 to 512 [ 1010.368729][ T4710] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.511618][T13020] ext4: Unknown parameter 'measure' [ 1010.754699][ T4710] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1010.802275][ T4710] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1010.834191][ T4709] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1010.892415][ T4710] usb 5-1: Product: syz [ 1010.931605][ T4710] usb 5-1: Manufacturer: syz [ 1010.938174][ T4710] usb 5-1: SerialNumber: syz [ 1010.979927][ T4710] usb 5-1: config 0 descriptor?? [ 1011.214660][ T4709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.308531][ T4709] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.253605][T13037] loop2: detected capacity change from 0 to 512 [ 1012.391773][ T4710] usb 5-1: USB disconnect, device number 26 [ 1012.397521][T13037] ext4: Unknown parameter 'measure' [ 1012.514484][ T4709] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1013.279650][ T4709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1014.262577][ T4709] usb 2-1: SerialNumber: syz [ 1015.254220][ T4709] usb 2-1: can't set config #1, error -71 [ 1016.294402][ T4709] usb 2-1: USB disconnect, device number 23 [ 1016.467781][T13042] geneve1 speed is unknown, defaulting to 1000 [ 1016.533313][T13054] loop0: detected capacity change from 0 to 64 [ 1016.548906][T13051] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1016.562122][T13055] loop3: detected capacity change from 0 to 1024 [ 1016.668140][T13055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1016.898434][T13055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1017.105432][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 1017.208454][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.331342][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1017.503435][T13051] rdma_rxe: rxe_register_device failed with error -23 [ 1017.517588][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.586754][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 1017.606336][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.636428][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1017.662195][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.696850][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1017.728587][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.753239][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1017.779044][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.799617][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1017.823659][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.846465][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 1017.871512][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.906205][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan6 [ 1017.934565][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.944497][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1017.954544][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.964475][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 1017.975682][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.990932][T13064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan6 [ 1018.000923][T13064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.018019][ T9321] EXT4-fs (loop3): unmounting filesystem. [ 1018.046949][T13064] batman_adv: batadv0: Adding interface: ipvlan7 [ 1018.059776][T13064] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.102262][T13064] batman_adv: batadv0: Interface activated: ipvlan7 [ 1018.115301][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.115301][T10349] loop0: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1018.134446][T13047] geneve1 speed is unknown, defaulting to 1000 [ 1018.196924][T10349] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 1018.229502][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.229502][T10349] loop0: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1018.293652][T10349] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 1018.337947][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.337947][T10349] loop0: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1018.362768][T13076] loop2: detected capacity change from 0 to 1024 [ 1018.433084][T10349] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 1018.484224][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.484224][T10349] loop0: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1018.559805][T13051] rdma_rxe: failed to add geneve1 [ 1018.595985][T10349] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 1018.658861][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.658861][T10349] loop0: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1018.748711][T10349] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 1018.777939][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.777939][T10349] loop0: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1018.793424][T13078] loop1: detected capacity change from 0 to 8 [ 1018.825776][T13078] squashfs: Unknown parameter 'ãߪݨe †Gç8€„ÝIêy²£ÏÎL¡d^`' [ 1018.849805][T10349] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 1018.871052][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.871052][T10349] loop0: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1018.906933][T10349] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 1018.922619][T10349] kworker/u4:11: attempt to access beyond end of device [ 1018.922619][T10349] loop0: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1018.994227][T10349] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 1019.024714][T10349] kworker/u4:11: attempt to access beyond end of device [ 1019.024714][T10349] loop0: rw=1, sector=78, nr_sectors = 89 limit=64 [ 1019.360105][T13084] loop4: detected capacity change from 0 to 512 [ 1020.157744][T13084] ext4: Unknown parameter 'measure' [ 1020.644607][ T4710] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1021.024373][ T4710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.040027][ T4710] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1021.134409][ T4710] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1021.144512][ T4710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1021.152693][ T4710] usb 2-1: SerialNumber: syz [ 1021.393939][T13104] loop0: detected capacity change from 0 to 512 [ 1021.449627][ T4710] usb 2-1: 0:2 : does not exist [ 1021.454863][ T4710] usb 2-1: unit 5 not found! [ 1021.475463][ T3692] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1021.502250][ T4710] usb 2-1: USB disconnect, device number 24 [ 1021.580608][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.742360][T13108] loop3: detected capacity change from 0 to 512 [ 1021.750730][T13108] ext4: Unknown parameter 'measure' [ 1023.048779][T13116] loop1: detected capacity change from 0 to 64 [ 1023.565905][T13119] loop0: detected capacity change from 0 to 8 [ 1023.611375][T13120] loop4: detected capacity change from 0 to 512 [ 1023.620248][T13119] squashfs: Unknown parameter 'ãߪݨe †Gç8€„ÝIêy²£ÏÎL¡d^`' [ 1023.670138][T13125] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.693818][T13125] rdma_rxe: rxe_register_device failed with error -23 [ 1023.718612][T13125] rdma_rxe: failed to add geneve1 [ 1023.749256][T13119] 9pnet_fd: Insufficient options for proto=fd [ 1024.006655][T13127] autofs4:pid:13127:autofs_fill_super: called with bogus options [ 1024.152786][T13133] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1024.715523][T13133] rdma_rxe: rxe_register_device failed with error -23 [ 1024.722476][T13133] rdma_rxe: failed to add geneve1 [ 1025.738499][T10349] kworker/u4:11: attempt to access beyond end of device [ 1025.738499][T10349] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1025.775766][T10349] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 1025.785191][T10349] kworker/u4:11: attempt to access beyond end of device [ 1025.785191][T10349] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1025.873330][T10349] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 1025.912645][T10349] kworker/u4:11: attempt to access beyond end of device [ 1025.912645][T10349] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1025.986997][T10349] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 1026.015855][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.015855][T10349] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1026.064931][T10349] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 1026.091597][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.091597][T10349] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1026.155623][T10349] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 1026.198344][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.198344][T10349] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1026.214234][ T5583] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1026.244310][T10349] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 1026.273658][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.273658][T10349] loop1: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1026.297702][T10349] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 1026.314165][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.314165][T10349] loop1: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1026.347871][T10349] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 1026.375399][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.375399][T10349] loop1: rw=1, sector=78, nr_sectors = 48 limit=64 [ 1026.429675][T10349] kworker/u4:11: attempt to access beyond end of device [ 1026.429675][T10349] loop1: rw=1, sector=126, nr_sectors = 1 limit=64 [ 1026.491925][T10349] Buffer I/O error on dev loop1, logical block 126, lost async page write [ 1026.531143][T10349] Buffer I/O error on dev loop1, logical block 127, lost async page write [ 1026.664400][ T5583] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.686085][ T5583] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.845248][ T5583] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1026.875301][T13157] loop3: detected capacity change from 0 to 1024 [ 1026.916577][ T5583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1026.987555][ T5583] usb 5-1: SerialNumber: syz [ 1027.404929][ T5583] usb 5-1: 0:2 : does not exist [ 1027.410116][ T5583] usb 5-1: unit 5 not found! [ 1027.451802][T13163] loop1: detected capacity change from 0 to 512 [ 1027.488167][ T5583] usb 5-1: USB disconnect, device number 27 [ 1027.569589][ T3692] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1027.817847][T13171] autofs4:pid:13171:autofs_fill_super: called with bogus options [ 1027.896059][T13172] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1027.910709][T13172] rdma_rxe: rxe_register_device failed with error -23 [ 1028.042977][T13172] rdma_rxe: failed to add geneve1 [ 1028.087782][T13177] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1028.133614][T13177] rdma_rxe: rxe_register_device failed with error -23 [ 1028.236129][T13177] rdma_rxe: failed to add geneve1 [ 1029.852495][T13181] loop1: detected capacity change from 0 to 32768 [ 1029.907203][T13181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (13181) [ 1029.968804][T13181] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1030.034220][T13185] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1030.051628][T13181] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1030.121586][T13185] rdma_rxe: already configured on geneve1 [ 1030.144219][T13181] BTRFS info (device loop1): using free space tree [ 1030.388278][T13198] loop2: detected capacity change from 0 to 512 [ 1030.437515][ T3692] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1030.544730][T13181] BTRFS info (device loop1): enabling ssd optimizations [ 1031.066876][T13211] loop2: detected capacity change from 0 to 128 [ 1031.088649][T13214] loop0: detected capacity change from 0 to 512 [ 1031.162817][T13211] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1031.648326][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1031.988812][T12113] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1032.864794][ T3613] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1033.054379][ T4000] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1033.264694][ T3613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.318108][ T3613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.444796][ T4000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.504372][ T3613] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1033.523877][ T4000] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1033.544150][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1033.604196][ T4000] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1033.613341][ T4000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.628817][ T3613] usb 3-1: SerialNumber: syz [ 1033.663317][ T4000] usb 1-1: config 0 descriptor?? [ 1033.772896][T13241] geneve1 speed is unknown, defaulting to 1000 [ 1033.927167][ T3613] usb 3-1: 0:2 : does not exist [ 1033.942335][ T3613] usb 3-1: unit 5 not found! [ 1033.956260][ T3613] usb 3-1: USB disconnect, device number 26 [ 1034.047851][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.303435][T13255] loop1: detected capacity change from 0 to 128 [ 1034.730120][T13262] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1034.762599][T13262] rdma_rxe: rxe_register_device failed with error -23 [ 1034.772952][T13262] rdma_rxe: failed to add geneve1 [ 1034.782550][T13258] autofs4:pid:13258:autofs_fill_super: called with bogus options [ 1035.531172][T13269] loop3: detected capacity change from 0 to 1024 [ 1035.745193][ T4710] usb 1-1: USB disconnect, device number 19 [ 1036.616958][T13278] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1036.708382][T13278] rdma_rxe: rxe_register_device failed with error -23 [ 1036.779452][T13278] rdma_rxe: failed to add geneve1 [ 1036.891921][T13273] loop0: detected capacity change from 0 to 32768 [ 1036.938214][T13273] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (13273) [ 1036.951781][T13279] autofs4:pid:13279:autofs_fill_super: called with bogus options [ 1037.811631][T13273] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1037.854235][T13273] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1037.922071][T13273] BTRFS info (device loop0): using free space tree [ 1038.512879][T13273] BTRFS info (device loop0): enabling ssd optimizations [ 1038.808299][T13314] loop2: detected capacity change from 0 to 512 [ 1038.839978][T13314] ext4: Unknown parameter 'measure' [ 1038.936332][ T3692] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1039.196335][ T5582] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1039.574479][ T5582] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.635216][ T5582] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.681786][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1039.729673][ T5582] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1039.777751][ T5582] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1039.874512][ T5582] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1039.894356][ T5582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1039.913842][ T5582] usb 4-1: SerialNumber: syz [ 1040.036799][ T3581] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1040.077655][ T3618] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1040.207393][ T5582] usb 4-1: 0:2 : does not exist [ 1040.213317][ T5582] usb 4-1: unit 5 not found! [ 1040.250051][ T5582] usb 4-1: USB disconnect, device number 25 [ 1040.301651][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.454450][ T3618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.474329][ T3618] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1040.493803][ T3618] usb 5-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1040.520412][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.555790][ T3618] usb 5-1: config 0 descriptor?? [ 1040.935650][T13326] loop1: detected capacity change from 0 to 32768 [ 1041.074958][T13336] loop3: detected capacity change from 0 to 128 [ 1041.083313][T13326] XFS (loop1): Mounting V5 Filesystem [ 1041.129160][T13336] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1041.237339][T13326] XFS (loop1): Ending clean mount [ 1041.373115][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1041.428671][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1041.508344][T13331] loop0: detected capacity change from 0 to 32768 [ 1041.518364][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1041.553374][T13331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (13331) [ 1041.619079][T13331] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1041.631101][T13331] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1041.649186][T13331] BTRFS info (device loop0): using free space tree [ 1041.773515][T13331] BTRFS info (device loop0): enabling ssd optimizations [ 1042.681277][ T5582] usb 5-1: USB disconnect, device number 28 [ 1043.026932][T13375] autofs4:pid:13375:autofs_fill_super: called with bogus options [ 1043.192868][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1043.331204][T12113] XFS (loop1): Unmounting Filesystem [ 1043.338870][T13376] loop4: detected capacity change from 0 to 2048 [ 1043.478566][T13376] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1043.495149][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop4 [ 1043.515523][ T3581] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1043.544830][T13376] NILFS (loop4): mounting unchecked fs [ 1043.569085][T13376] NILFS (loop4): recovery required for readonly filesystem [ 1043.577109][T13376] NILFS (loop4): write access will be enabled during recovery [ 1043.601958][T13376] NILFS (loop4): recovery complete [ 1044.403882][T13385] geneve1 speed is unknown, defaulting to 1000 [ 1044.605615][T13388] loop2: detected capacity change from 0 to 512 [ 1044.842744][T13394] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1045.013402][T13397] loop2: detected capacity change from 0 to 128 [ 1045.071042][T13397] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1045.313371][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1045.374287][ T9509] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1045.434665][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1045.493984][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1045.547163][T13409] loop4: detected capacity change from 0 to 512 [ 1045.666220][T13394] rdma_rxe: rxe_register_device failed with error -23 [ 1045.685666][T13394] rdma_rxe: failed to add geneve1 [ 1045.784479][ T9509] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.825642][ T9509] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.877771][ T9509] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1045.913821][ T9509] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1045.953917][T13413] loop4: detected capacity change from 0 to 128 [ 1045.959939][T13386] geneve1 speed is unknown, defaulting to 1000 [ 1046.018336][T13413] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1046.044438][ T9509] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1046.067829][ T9509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1046.123042][ T9509] usb 4-1: SerialNumber: syz [ 1046.216758][T13416] loop2: detected capacity change from 0 to 512 [ 1046.233261][T13416] ext4: Unknown parameter 'measure' [ 1046.292433][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1046.366768][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1046.419376][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1046.470833][ T9509] usb 4-1: 0:2 : does not exist [ 1046.478553][ T9509] usb 4-1: unit 5 not found! [ 1046.576594][ T9509] usb 4-1: USB disconnect, device number 26 [ 1046.769307][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.423324][T13437] loop4: detected capacity change from 0 to 512 [ 1047.430350][T13439] loop2: detected capacity change from 0 to 512 [ 1047.467976][ T3647] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1047.803893][T13446] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1047.899789][T13446] rdma_rxe: rxe_register_device failed with error -23 [ 1047.971706][T13446] rdma_rxe: failed to add geneve1 [ 1048.414713][T13427] loop3: detected capacity change from 0 to 32768 [ 1048.650369][T13427] XFS (loop3): Mounting V5 Filesystem [ 1048.814727][T13449] loop4: detected capacity change from 0 to 2048 [ 1048.816288][T13427] XFS (loop3): Ending clean mount [ 1048.865212][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop4 [ 1048.959793][T13449] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1048.990507][T13449] NILFS (loop4): mounting unchecked fs [ 1048.992503][T13461] loop1: detected capacity change from 0 to 128 [ 1049.022410][T13449] NILFS (loop4): recovery required for readonly filesystem [ 1049.030173][T13449] NILFS (loop4): write access will be enabled during recovery [ 1049.133295][T13461] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1049.143165][T13449] NILFS (loop4): recovery complete [ 1049.361516][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop4 [ 1049.402735][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1049.494445][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1049.559718][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.155380][T13476] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1051.204837][T13476] rdma_rxe: rxe_register_device failed with error -23 [ 1051.246100][T13476] rdma_rxe: failed to add geneve1 [ 1051.294155][ T3586] Bluetooth: hci2: command 0x0406 tx timeout [ 1051.955288][T13489] loop0: detected capacity change from 0 to 512 [ 1051.982819][T13489] ext4: Unknown parameter 'measure' [ 1051.984155][T13482] geneve1 speed is unknown, defaulting to 1000 [ 1052.173468][ T7044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1052.185416][T10645] syz-executor.2 (10645) used greatest stack depth: 19992 bytes left [ 1052.194478][ T7044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1052.203069][ T7044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1052.213525][ T7044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1052.226281][ T7044] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1052.233722][ T7044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1052.688155][ T9321] XFS (loop3): Unmounting Filesystem [ 1053.008651][T13490] geneve1 speed is unknown, defaulting to 1000 [ 1053.548810][T13504] loop3: detected capacity change from 0 to 512 [ 1053.643322][T13505] autofs4:pid:13505:autofs_fill_super: called with bogus options [ 1053.843450][T13490] chnl_net:caif_netlink_parms(): no params data found [ 1054.131145][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.156385][T13516] loop3: detected capacity change from 0 to 512 [ 1054.166257][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.196214][T13516] ext4: Unknown parameter 'measure' [ 1054.214915][T13490] device bridge_slave_0 entered promiscuous mode [ 1054.325515][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.335455][ T7044] Bluetooth: hci3: command tx timeout [ 1054.337266][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.347747][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.413648][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.493654][T13490] device bridge_slave_1 entered promiscuous mode [ 1054.520647][T13515] loop1: detected capacity change from 0 to 2048 [ 1054.614398][T13515] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1054.670064][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop1 [ 1054.720785][T13515] NILFS (loop1): mounting unchecked fs [ 1054.728205][T13515] NILFS (loop1): recovery required for readonly filesystem [ 1054.737779][T13515] NILFS (loop1): write access will be enabled during recovery [ 1054.751035][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.813973][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.916423][T13515] NILFS (loop1): recovery complete [ 1054.951832][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop1 [ 1054.995212][T13490] team0: Port device team_slave_0 added [ 1055.007821][T13490] team0: Port device team_slave_1 added [ 1055.024437][ T9509] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1055.187741][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.194780][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.544972][ T9509] usb 1-1: Using ep0 maxpacket: 32 [ 1055.928555][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.988563][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.995950][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.038255][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.084360][ T9509] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.153337][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.172229][ T9509] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.349490][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.384401][ T9509] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1056.387613][T13490] device hsr_slave_0 entered promiscuous mode [ 1056.393563][ T9509] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1056.393590][ T9509] usb 1-1: Product: syz [ 1056.393606][ T9509] usb 1-1: Manufacturer: syz [ 1056.393623][ T9509] usb 1-1: SerialNumber: syz [ 1056.424243][ T7044] Bluetooth: hci3: command tx timeout [ 1056.438222][T13490] device hsr_slave_1 entered promiscuous mode [ 1056.456652][T13490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.457253][ T9509] usb 1-1: config 0 descriptor?? [ 1056.484166][T13490] Cannot create hsr debugfs directory [ 1056.557573][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.703965][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.733225][ T5578] usb 1-1: USB disconnect, device number 20 [ 1056.833031][T13532] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1056.891004][T13532] rdma_rxe: rxe_register_device failed with error -23 [ 1056.936536][T13532] rdma_rxe: failed to add geneve1 [ 1058.494296][ T7044] Bluetooth: hci3: command tx timeout [ 1058.647225][T13550] loop0: detected capacity change from 0 to 512 [ 1058.832267][T13529] loop3: detected capacity change from 0 to 32768 [ 1058.878729][T13529] XFS (loop3): Mounting V5 Filesystem [ 1058.929471][T13490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1058.991641][T13529] XFS (loop3): Ending clean mount [ 1059.171348][T13490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1059.205353][T13490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1059.324507][T13490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1059.502118][T13571] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1059.570187][T13571] rdma_rxe: rxe_register_device failed with error -23 [ 1059.627687][T13571] rdma_rxe: failed to add geneve1 [ 1059.979880][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.161459][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.177543][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.270904][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.359648][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1060.383359][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1060.408639][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.415803][ T9507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.584171][ T7044] Bluetooth: hci3: command tx timeout [ 1060.709883][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1060.781295][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1060.813872][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1060.832850][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.839969][ T9507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.920447][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1061.000052][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1061.030842][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1061.053694][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1061.459417][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1061.479044][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1061.512252][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1061.597725][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1061.613094][T13490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.673994][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1061.701186][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1061.714644][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1061.743875][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1062.949720][ T56] device hsr_slave_0 left promiscuous mode [ 1062.983100][ T56] device hsr_slave_1 left promiscuous mode [ 1063.018562][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.044844][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.101512][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.137053][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.191117][ T56] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1063.217560][ T56] batman_adv: batadv0: Removing interface: ipvlan2 [ 1063.266001][ T56] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1063.299530][ T56] batman_adv: batadv0: Removing interface: ipvlan3 [ 1063.349432][ T9321] XFS (loop3): Unmounting Filesystem [ 1063.361778][T13603] loop0: detected capacity change from 0 to 2048 [ 1063.370564][ T56] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 1063.388550][ T56] batman_adv: batadv0: Removing interface: ipvlan4 [ 1063.419684][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop0 [ 1063.429403][ T56] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 1063.478279][ T56] batman_adv: batadv0: Removing interface: ipvlan5 [ 1063.513421][ T56] batman_adv: batadv0: Interface deactivated: ipvlan6 [ 1063.550440][ T56] batman_adv: batadv0: Removing interface: ipvlan6 [ 1063.571635][T13603] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1063.601910][ T56] batman_adv: batadv0: Interface deactivated: ipvlan7 [ 1063.624378][ T56] batman_adv: batadv0: Removing interface: ipvlan7 [ 1063.634389][T13603] NILFS (loop0): mounting unchecked fs [ 1063.650881][ T56] device bridge_slave_1 left promiscuous mode [ 1063.657657][T13603] NILFS (loop0): recovery required for readonly filesystem [ 1063.665579][T13603] NILFS (loop0): write access will be enabled during recovery [ 1063.688054][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.744463][ T56] device bridge_slave_0 left promiscuous mode [ 1063.753307][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.808599][ T56] device veth1_macvtap left promiscuous mode [ 1063.818523][ T56] device veth0_macvtap left promiscuous mode [ 1063.840138][ T56] device veth1_vlan left promiscuous mode [ 1063.864053][ T56] device veth0_vlan left promiscuous mode [ 1064.097467][T13603] NILFS (loop0): recovery complete [ 1064.210756][ T3647] udevd[3647]: incorrect nilfs2 checksum on /dev/loop0 [ 1066.402715][T13629] loop3: detected capacity change from 0 to 2048 [ 1066.482652][T13629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1066.495052][T13629] ext4 filesystem being mounted at /root/syzkaller-testdir4276758472/syzkaller.1YRJuX/194/bus supports timestamps until 2038 (0x7fffffff) [ 1066.576406][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1066.813784][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1066.842650][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.076670][T13635] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 1067.587797][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.668497][ T9321] EXT4-fs (loop3): unmounting filesystem. [ 1067.997467][ T56] bond0 (unregistering): Released all slaves [ 1068.000168][T13639] loop3: detected capacity change from 0 to 512 [ 1068.056118][T13639] ext4: Unknown parameter 'measure' [ 1068.431576][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1068.439771][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1068.458147][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.501174][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1068.513067][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1068.539814][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.550190][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1068.562054][T13490] device veth0_vlan entered promiscuous mode [ 1068.634750][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1068.642739][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1068.732747][T13645] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1068.769235][T13490] device veth1_vlan entered promiscuous mode [ 1068.867549][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1068.884924][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1068.903564][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.953490][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.977219][T13490] device veth0_macvtap entered promiscuous mode [ 1069.058898][T13490] device veth1_macvtap entered promiscuous mode [ 1069.058901][T13652] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.059078][T13652] rdma_rxe: rxe_register_device failed with error -23 [ 1069.096413][ T27] audit: type=1800 audit(1718925011.379:173): pid=13655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1069.177879][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.219817][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.231091][T13652] rdma_rxe: failed to add geneve1 [ 1069.263877][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.306021][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.343080][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.377648][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.394217][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.428889][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.483915][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.510410][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1069.519770][T13666] loop3: detected capacity change from 0 to 512 [ 1069.590735][T13666] ext4: Unknown parameter 'measure' [ 1069.664690][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1069.703058][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1069.750535][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1069.788557][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.803272][ T3647] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1069.889684][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.970936][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.055767][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.354876][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.410110][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.441741][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.452652][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.496346][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.536863][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1070.692821][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1070.710722][T13490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.720146][T13490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.729053][T13490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.131899][T13490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.517368][T13674] loop4: detected capacity change from 0 to 64 [ 1071.779654][ T3685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.803081][ T3685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.874567][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1071.900015][T12491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.939331][T12491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.969519][T13678] autofs4:pid:13678:autofs_fill_super: called with bogus options [ 1072.004852][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1072.444746][ T3619] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1072.758381][T13688] loop0: detected capacity change from 0 to 512 [ 1072.962111][ T3619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.582243][T13688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1073.591276][T13688] ext4 filesystem being mounted at /root/syzkaller-testdir219053944/syzkaller.etqI0w/443/file0 supports timestamps until 2038 (0x7fffffff) [ 1073.612075][T13687] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 1073.625492][T13687] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1073.637947][T13687] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 1073.650730][T13687] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1073.673719][ T3619] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.674778][T13684] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1073.724947][T13684] rdma_rxe: rxe_register_device failed with error -23 [ 1073.750433][ T3619] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1073.832951][T13684] rdma_rxe: failed to add geneve1 [ 1073.838407][ T3619] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1073.937349][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 1073.950709][ T3685] bio_check_eod: 9 callbacks suppressed [ 1073.950720][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1073.950720][ T3685] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1073.974308][ T3619] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1074.004221][ T3685] buffer_io_error: 6 callbacks suppressed [ 1074.004240][ T3685] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 1074.039013][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1074.054210][ T3619] usb 3-1: SerialNumber: syz [ 1074.222550][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.222550][ T3685] loop4: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1074.263211][ T3685] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 1074.279675][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.279675][ T3685] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1074.313654][ T3685] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 1074.347695][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.347695][ T3685] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1074.381515][ T3685] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 1074.396933][ T3619] usb 3-1: 0:2 : does not exist [ 1074.400781][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.400781][ T3685] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1074.401851][ T3619] usb 3-1: unit 5 not found! [ 1074.455377][ T3685] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 1074.493081][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.493081][ T3685] loop4: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1074.586554][ T3619] usb 3-1: USB disconnect, device number 27 [ 1074.633681][ T3685] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 1074.752798][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.752798][ T3685] loop4: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1074.854939][ T3685] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 1074.863453][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.863453][ T3685] loop4: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1074.952249][ T3685] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 1074.990333][ T3685] kworker/u4:7: attempt to access beyond end of device [ 1074.990333][ T3685] loop4: rw=1, sector=78, nr_sectors = 89 limit=64 [ 1076.040266][T13712] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1076.163043][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 1076.198345][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.273090][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1076.309149][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.369401][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1076.427789][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.460697][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1076.492289][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.504204][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1076.549174][T13720] loop4: detected capacity change from 0 to 512 [ 1076.609125][T13720] ext4: Unknown parameter 'measure' [ 1076.666398][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.739662][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 1076.790910][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.821229][T13722] loop1: detected capacity change from 0 to 2048 [ 1076.822065][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan6 [ 1076.921591][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.940055][T13722] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1076.962639][T13722] ext4 filesystem being mounted at /root/syzkaller-testdir1194622995/syzkaller.hmKYdZ/53/bus supports timestamps until 2038 (0x7fffffff) [ 1076.966820][T13714] batman_adv: batadv0: Adding interface: ipvlan2 [ 1077.067648][T13714] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.123920][T13714] batman_adv: batadv0: Interface activated: ipvlan2 [ 1078.046677][T12113] EXT4-fs (loop1): unmounting filesystem. [ 1078.160145][T13732] autofs4:pid:13732:autofs_fill_super: called with bogus options [ 1079.277003][T13744] loop2: detected capacity change from 0 to 2048 [ 1079.286975][T13746] loop0: detected capacity change from 0 to 64 [ 1079.377474][T13744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1079.394256][T13744] ext4 filesystem being mounted at /root/syzkaller-testdir2709124023/syzkaller.fYrIff/5/bus supports timestamps until 2038 (0x7fffffff) [ 1080.047351][T13751] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 1080.596759][T13490] EXT4-fs (loop2): unmounting filesystem. [ 1081.102507][T13742] loop4: detected capacity change from 0 to 32768 [ 1081.221182][T13742] XFS (loop4): Mounting V5 Filesystem [ 1081.646612][T13742] XFS (loop4): Ending clean mount [ 1082.201033][T12643] XFS (loop4): Unmounting Filesystem [ 1082.247767][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.247767][T12533] loop0: rw=1, sector=65, nr_sectors = 1 limit=64 [ 1082.285606][T13771] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 1082.313106][T12533] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 1082.377884][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.377884][T12533] loop0: rw=1, sector=66, nr_sectors = 1 limit=64 [ 1082.459632][T12533] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 1082.476086][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.476086][T12533] loop0: rw=1, sector=67, nr_sectors = 1 limit=64 [ 1082.491027][T13775] loop1: detected capacity change from 0 to 1024 [ 1082.498980][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 1082.504952][T13778] loop3: detected capacity change from 0 to 128 [ 1082.515146][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.515163][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1082.515180][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.525169][T12533] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 1082.525228][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.525228][T12533] loop0: rw=1, sector=68, nr_sectors = 1 limit=64 [ 1082.569659][T12533] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 1082.579557][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.579557][T12533] loop0: rw=1, sector=72, nr_sectors = 1 limit=64 [ 1082.593316][T13778] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1082.601843][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 1082.612472][T12533] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 1082.621165][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.631330][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.631330][T12533] loop0: rw=1, sector=73, nr_sectors = 1 limit=64 [ 1082.644775][T12533] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 1082.653364][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1082.663520][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.663520][T12533] loop0: rw=1, sector=76, nr_sectors = 1 limit=64 [ 1082.686749][T12533] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 1082.697102][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.707405][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.707405][T12533] loop0: rw=1, sector=77, nr_sectors = 1 limit=64 [ 1082.720941][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 1082.731127][T12533] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 1082.739927][T12533] kworker/u4:14: attempt to access beyond end of device [ 1082.739927][T12533] loop0: rw=1, sector=78, nr_sectors = 89 limit=64 [ 1082.753579][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.765653][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan5 [ 1082.775772][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.793375][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan6 [ 1082.803517][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.854391][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 1082.864532][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.879387][ T27] audit: type=1800 audit(1718925025.159:174): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 1082.929233][T13779] batman_adv: batadv0: Adding interface: ipvlan3 [ 1082.960893][T13779] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.961519][ T3647] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1083.099489][T13779] batman_adv: batadv0: Interface activated: ipvlan3 [ 1083.538516][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1083.792180][T13793] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 1084.104616][T13798] loop2: detected capacity change from 0 to 1024 [ 1084.170699][T13798] EXT4-fs: Ignoring removed orlov option [ 1084.192688][T13798] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1084.262314][T13798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1084.454264][ T5578] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1085.288504][T13811] loop0: detected capacity change from 0 to 4096 [ 1085.524367][ T5578] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 1085.573728][T13798] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1085.588214][T13811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1085.615359][ T5578] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.656383][ T5578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1085.684764][ T5578] usb 4-1: SerialNumber: syz [ 1085.779145][T13820] loop4: detected capacity change from 0 to 8192 [ 1085.804307][ T27] audit: type=1800 audit(1718925028.079:175): pid=13809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 1085.921593][T13808] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1085.949175][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 1086.099926][T13829] loop4: detected capacity change from 0 to 512 [ 1086.179699][T13829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1086.183744][T13834] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1086.189074][T13829] ext4 filesystem being mounted at /root/syzkaller-testdir1753565223/syzkaller.KeJo0D/36/file0 supports timestamps until 2038 (0x7fffffff) [ 1086.213851][T13829] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 1086.341473][T13490] EXT4-fs (loop2): unmounting filesystem. [ 1086.429135][ T5578] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1086.483680][ T27] audit: type=1326 audit(1718925028.759:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422427cf29 code=0x7ffc0000 [ 1086.541858][ T27] audit: type=1326 audit(1718925028.759:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f422427cf29 code=0x7ffc0000 [ 1086.598544][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.621874][ T27] audit: type=1326 audit(1718925028.759:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422427cf29 code=0x7ffc0000 [ 1086.627191][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.204988][T12643] EXT4-fs (loop4): unmounting filesystem. [ 1087.339261][T13804] loop3: detected capacity change from 0 to 512 [ 1087.526403][T13853] loop4: detected capacity change from 0 to 256 [ 1087.535320][T13804] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz-executor.3: casefold flag without casefold feature [ 1087.567489][T13856] loop1: detected capacity change from 0 to 128 [ 1087.603945][T13804] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1087.665956][T13804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1087.689681][ T6723] usb 4-1: USB disconnect, device number 27 [ 1087.699871][ T6723] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 1088.830619][ T9321] EXT4-fs (loop3): unmounting filesystem. [ 1088.960186][T13875] loop2: detected capacity change from 0 to 512 [ 1088.979919][T13875] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1089.072590][T13875] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz-executor.2: iget: bogus i_mode (0) [ 1089.108898][T13875] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 1089.173073][T13875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1089.214226][ T4625] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1089.295410][T13490] EXT4-fs (loop2): unmounting filesystem. [ 1089.302479][ T27] audit: type=1800 audit(1718925031.579:179): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1049229 res=0 errno=0 [ 1089.391340][ T27] audit: type=1804 audit(1718925031.579:180): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1194622995/syzkaller.hmKYdZ/57/file0/file0" dev="loop1" ino=1049229 res=1 errno=0 [ 1089.584385][ T4625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.613004][ T4625] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1089.724209][ T4625] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1089.744325][ T4625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1089.752937][ T4625] usb 5-1: SerialNumber: syz [ 1090.117736][ T4625] usb 5-1: 0:2 : does not exist [ 1090.132299][ T4625] usb 5-1: unit 5 not found! [ 1090.770756][T13903] loop3: detected capacity change from 0 to 128 [ 1090.793392][ T4625] usb 5-1: USB disconnect, device number 29 [ 1091.159897][T13903] EXT4-fs: quotafile must be on filesystem root [ 1091.477937][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.678050][T13916] loop4: detected capacity change from 0 to 512 [ 1091.712923][T13916] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1091.729982][T13922] fuse: Bad value for 'fd' [ 1091.771455][T13916] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz-executor.4: iget: bogus i_mode (0) [ 1091.799021][T13916] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 1091.814238][T13916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1091.950081][T12643] EXT4-fs (loop4): unmounting filesystem. [ 1093.802878][T13943] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1093.831165][T13943] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1093.838441][ T27] audit: type=1326 audit(1718925036.119:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6fe7cf29 code=0x7ffc0000 [ 1093.869115][T13921] loop0: detected capacity change from 0 to 40427 [ 1093.900263][T13921] F2FS-fs (loop0): invalid crc value [ 1093.919462][ T27] audit: type=1326 audit(1718925036.149:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6fe7cf29 code=0x7ffc0000 [ 1093.979807][T13921] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1093.994509][ T27] audit: type=1326 audit(1718925036.149:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3e6fe7cf29 code=0x7ffc0000 [ 1094.081369][T13951] loop2: detected capacity change from 0 to 1024 [ 1094.324893][ T27] audit: type=1326 audit(1718925036.149:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6fe7cf29 code=0x7ffc0000 [ 1094.422575][T13921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1094.468238][T13951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1094.815274][ T3581] syz-executor.0: attempt to access beyond end of device [ 1094.815274][ T3581] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1094.845482][ T27] audit: type=1326 audit(1718925036.159:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e6fe7cf29 code=0x7ffc0000 [ 1094.927851][ T27] audit: type=1326 audit(1718925036.169:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6fe7cf29 code=0x7ffc0000 [ 1094.956301][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.009565][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.051708][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.080566][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.110621][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.142917][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.179736][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.201536][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.240313][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.261041][T13490] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor.2: invalid size [ 1095.867090][ T6701] tipc: Subscription rejected, illegal request [ 1096.289587][T13977] loop0: detected capacity change from 0 to 512 [ 1096.330392][T13977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1096.385692][T13977] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1096.413765][T13977] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1096.478002][T13977] EXT4-fs (loop0): 1 truncate cleaned up [ 1096.483707][T13977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1096.724332][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 1096.725274][T13980] loop3: detected capacity change from 0 to 128 [ 1096.786729][T13980] EXT4-fs: quotafile must be on filesystem root [ 1097.915223][T13992] loop1: detected capacity change from 0 to 1024 [ 1098.180563][T13992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1098.840888][T12113] EXT4-fs (loop1): unmounting filesystem. [ 1099.574120][T14011] loop1: detected capacity change from 0 to 512 [ 1099.595332][T14011] EXT4-fs: Ignoring removed mblk_io_submit option [ 1099.619328][T14011] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1099.685865][T14011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 1099.727376][T14011] EXT4-fs (loop1): Remounting filesystem read-only [ 1099.739441][T14011] Quota error (device loop1): write_blk: dquota write failed [ 1099.760408][T14011] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1099.789042][T14011] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 0 [ 1099.820101][T14011] EXT4-fs (loop1): 1 orphan inode deleted [ 1099.831598][T14011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1099.868805][T14011] EXT4-fs (loop1): unmounting filesystem. [ 1100.147064][T14009] loop3: detected capacity change from 0 to 40427 [ 1100.165509][T14009] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1100.173297][T14009] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1100.233040][T14009] F2FS-fs (loop3): invalid crc value [ 1100.262698][T14009] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1100.360382][T14009] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1100.384118][T14009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1100.484440][ T27] audit: type=1326 audit(1718925042.769:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66907cf29 code=0x0 [ 1101.104960][T14036] syz-executor.3: attempt to access beyond end of device [ 1101.104960][T14036] loop3: rw=2049, sector=77824, nr_sectors = 536 limit=40427 [ 1101.968727][T11911] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1101.998190][T11911] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1102.494357][ T3586] Bluetooth: hci0: command 0x0406 tx timeout [ 1103.076755][T14043] loop3: detected capacity change from 0 to 16 [ 1103.110949][T14043] erofs: (device loop3): mounted with root inode @ nid 36. [ 1103.151235][T14043] erofs: (device loop3): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 1103.283893][T14045] loop3: detected capacity change from 0 to 1024 [ 1103.347397][T14045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1103.491176][T14038] loop0: detected capacity change from 0 to 40427 [ 1103.507197][T14038] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1103.519656][T14038] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1103.535738][T14038] F2FS-fs (loop0): invalid crc value [ 1103.543949][T14038] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1103.577740][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.600806][T14038] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1103.608703][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.612274][T14038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1103.628687][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.664374][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.678511][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.690301][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.702024][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.713770][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.725471][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1103.737165][ T9321] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor.3: invalid size [ 1104.626920][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1104.642326][ T56] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1108.039812][T14070] loop0: detected capacity change from 0 to 16 [ 1108.089837][T14070] erofs: (device loop0): mounted with root inode @ nid 36. [ 1108.116802][T14070] syz-executor.0: attempt to access beyond end of device [ 1108.116802][T14070] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1108.148991][T14070] syz-executor.0: attempt to access beyond end of device [ 1108.148991][T14070] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1109.074103][ T5578] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1109.474283][ T5578] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.489943][ T5578] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1109.500014][ T5578] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.674304][ T5578] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1109.684974][ T5578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.692984][ T5578] usb 1-1: Product: syz [ 1109.708004][ T5578] usb 1-1: Manufacturer: syz [ 1109.712646][ T5578] usb 1-1: SerialNumber: syz [ 1109.765290][ T5578] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1109.773639][ T5578] cdc_ncm 1-1:1.0: bind() failure [ 1109.978072][ T5578] usb 1-1: USB disconnect, device number 21 [ 1115.788511][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.794872][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.411778][ T7044] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1120.430488][ T7044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1120.440519][ T7044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1120.448702][ T7044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1120.456371][ T7044] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1120.463625][ T7044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1122.504275][ T7044] Bluetooth: hci1: command tx timeout [ 1124.143097][ T3586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1124.164303][ T3586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1124.174354][ T3586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1124.183645][ T3586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1124.193017][ T3586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1124.200423][ T3586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1124.574182][ T3586] Bluetooth: hci1: command tx timeout [ 1126.254253][ T3586] Bluetooth: hci3: command tx timeout [ 1126.654405][ T3586] Bluetooth: hci1: command tx timeout [ 1128.334181][ T3586] Bluetooth: hci3: command tx timeout [ 1128.734214][ T3586] Bluetooth: hci1: command tx timeout [ 1129.042426][ T7044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1129.054248][ T7044] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1129.062817][ T7044] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1129.073336][ T7044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1129.081746][ T7044] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1129.090238][ T7044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1130.424092][ T7044] Bluetooth: hci3: command tx timeout [ 1130.447539][ T3586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1130.458931][ T3586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1130.467415][ T3586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1130.478914][ T3579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1130.486547][ T3579] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1130.493797][ T3579] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1131.136302][ T3579] Bluetooth: hci5: command tx timeout [ 1132.494260][ T3579] Bluetooth: hci3: command tx timeout [ 1132.574299][ T7044] Bluetooth: hci6: command tx timeout [ 1133.214128][ T7044] Bluetooth: hci5: command tx timeout [ 1134.654259][ T7044] Bluetooth: hci6: command tx timeout [ 1135.294143][ T7044] Bluetooth: hci5: command tx timeout [ 1136.734156][ T7044] Bluetooth: hci6: command tx timeout [ 1137.374142][ T7044] Bluetooth: hci5: command tx timeout [ 1138.814372][ T7044] Bluetooth: hci6: command tx timeout [ 1143.099543][ T3579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1143.111938][ T3579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1143.120588][ T3579] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1143.130067][ T3579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1143.139745][ T3579] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1143.148631][ T3579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1145.224222][ T3579] Bluetooth: hci7: command tx timeout [ 1147.294372][ T3579] Bluetooth: hci7: command tx timeout [ 1149.374383][ T3579] Bluetooth: hci7: command tx timeout [ 1151.454347][ T3579] Bluetooth: hci7: command tx timeout [ 1177.216773][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.223109][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.622289][ T7044] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1185.644319][ T7044] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1185.653085][ T7044] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1185.661402][ T7044] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1185.668968][ T7044] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1185.676729][ T7044] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1187.782649][ T7044] Bluetooth: hci8: command tx timeout [ 1189.108819][ T3579] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1189.118770][ T3579] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1189.126901][ T3579] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1189.148931][ T3579] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1189.156736][ T3579] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1189.164188][ T3579] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1189.862429][ T3579] Bluetooth: hci8: command tx timeout [ 1191.214169][ T3579] Bluetooth: hci9: command tx timeout [ 1191.944150][ T3579] Bluetooth: hci8: command tx timeout [ 1193.304235][ T3579] Bluetooth: hci9: command tx timeout [ 1194.023739][ T3579] Bluetooth: hci8: command tx timeout [ 1194.074531][ T7044] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1194.087042][ T7044] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1194.097346][ T7044] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1194.108194][ T7044] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1194.121747][ T7044] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1194.130997][ T7044] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1195.374250][ T7044] Bluetooth: hci9: command tx timeout [ 1195.535330][ T3579] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1195.548773][ T3579] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1195.557167][ T3579] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1195.565503][ T3579] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1195.573180][ T3579] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1195.583816][ T3579] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1196.176221][ T3579] Bluetooth: hci10: command tx timeout [ 1197.454110][ T3579] Bluetooth: hci9: command tx timeout [ 1197.616295][ T3579] Bluetooth: hci11: command tx timeout [ 1198.254291][ T3579] Bluetooth: hci10: command tx timeout [ 1199.694158][ T3579] Bluetooth: hci11: command tx timeout [ 1200.334606][ T3579] Bluetooth: hci10: command tx timeout [ 1201.774436][ T3579] Bluetooth: hci11: command tx timeout [ 1202.414292][ T3579] Bluetooth: hci10: command tx timeout [ 1203.854309][ T3579] Bluetooth: hci11: command tx timeout [ 1208.074373][ T7044] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1208.090665][ T7044] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1208.099561][ T7044] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1208.109041][ T7044] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1208.117330][ T7044] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1208.125985][ T7044] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1210.174222][ T3579] Bluetooth: hci12: command tx timeout [ 1212.256240][ T3579] Bluetooth: hci12: command tx timeout [ 1214.334089][ T3579] Bluetooth: hci12: command tx timeout [ 1216.414075][ T3579] Bluetooth: hci12: command tx timeout [ 1238.657253][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.663582][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.694260][ T28] INFO: task syz-executor.2:13490 blocked for more than 143 seconds. [ 1245.702386][ T28] Not tainted 6.1.94-syzkaller #0 2024/06/20 23:13:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1245.743990][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1245.752916][ T28] task:syz-executor.2 state:D stack:20600 pid:13490 ppid:1 flags:0x00004002 [ 1245.804024][ T28] Call Trace: [ 1245.807791][ T28] [ 1245.810827][ T28] __schedule+0x142d/0x4550 [ 1245.834886][ T28] ? __sched_text_start+0x8/0x8 [ 1245.839814][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1245.854120][ T3579] Bluetooth: hci1: command 0x0406 tx timeout [ 1245.884107][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1245.889375][ T28] schedule+0xbf/0x180 [ 1245.893466][ T28] schedule_preempt_disabled+0xf/0x20 [ 1245.924022][ T28] __mutex_lock+0x6b9/0xd80 [ 1245.928595][ T28] ? __mutex_lock+0x53c/0xd80 [ 1245.933300][ T28] ? tun_chr_close+0x3a/0x1b0 [ 1245.964033][ T28] ? mutex_lock_nested+0x10/0x10 [ 1245.969048][ T28] tun_chr_close+0x3a/0x1b0 [ 1245.973579][ T28] ? tun_chr_open+0x4d0/0x4d0 [ 1245.989816][ T28] __fput+0x3b7/0x890 [ 1245.993878][ T28] task_work_run+0x246/0x300 [ 1246.005085][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 1246.010429][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 1246.025427][ T28] ? kmem_cache_free+0x292/0x510 [ 1246.030416][ T28] ? do_exit+0xa6e/0x26a0 [ 1246.040345][ T28] do_exit+0xa73/0x26a0 [ 1246.049181][ T28] ? put_task_struct+0x80/0x80 [ 1246.058636][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1246.084036][ T28] ? print_irqtrace_events+0x210/0x210 [ 1246.089583][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1246.103284][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1246.114250][ T28] do_group_exit+0x202/0x2b0 [ 1246.119774][ T28] __x64_sys_exit_group+0x3b/0x40 [ 1246.159508][ T28] do_syscall_64+0x3b/0xb0 [ 1246.166059][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1246.170806][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1246.190669][ T28] RIP: 0033:0x7f422427cf29 [ 1246.196782][ T28] RSP: 002b:00007fffe6d5d8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1246.211086][ T28] RAX: ffffffffffffffda RBX: 00007f42242d974a RCX: 00007f422427cf29 [ 1246.220204][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1246.234272][ T28] RBP: 0000000000000027 R08: 00007fffe6d5b696 R09: 00007fffe6d5ebb0 [ 1246.242289][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe6d5ebb0 [ 1246.255166][ T28] R13: 00007f42242d96c6 R14: 0000555556dd7430 R15: 0000000000000008 [ 1246.263206][ T28] [ 1246.272052][ T28] INFO: task syz-executor.1:14024 blocked for more than 143 seconds. [ 1246.283468][ T28] Not tainted 6.1.94-syzkaller #0 [ 1246.296114][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1246.309627][ T28] task:syz-executor.1 state:D stack:27320 pid:14024 ppid:12113 flags:0x00004006 [ 1246.322798][ T28] Call Trace: [ 1246.330201][ T28] [ 1246.333194][ T28] __schedule+0x142d/0x4550 [ 1246.340492][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1246.348677][ T28] ? __sched_text_start+0x8/0x8 [ 1246.353575][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1246.361643][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1246.370393][ T28] schedule+0xbf/0x180 [ 1246.377000][ T28] schedule_preempt_disabled+0xf/0x20 [ 1246.382400][ T28] __mutex_lock+0x6b9/0xd80 [ 1246.392398][ T28] ? __mutex_lock+0x53c/0xd80 [ 1246.399490][ T28] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 1246.408042][ T28] ? mutex_lock_nested+0x10/0x10 [ 1246.413028][ T28] rtnetlink_rcv_msg+0x7c1/0xff0 [ 1246.423447][ T28] ? rtnetlink_rcv_msg+0x1f9/0xff0 [ 1246.432799][ T28] ? rtnetlink_bind+0x80/0x80 [ 1246.440080][ T28] ? __local_bh_enable_ip+0x164/0x1f0 [ 1246.449431][ T28] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 1246.457132][ T28] ? _local_bh_enable+0xa0/0xa0 [