last executing test programs: 10.635907636s ago: executing program 2 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, {0x1, 0x0, 0x4}, {0x0, 0xf0}, 0xfe, 0x1}, {0x1, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0xff}, {0x0, 0x0, 0x1}, 0x0, 0xff}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 9.679964032s ago: executing program 2 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) 9.555972012s ago: executing program 2 (id=250): r0 = socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000080)=0xe, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0x1f, 0x5, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) 9.453714172s ago: executing program 2 (id=254): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x8}, 0x20) 8.692197519s ago: executing program 2 (id=262): getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x4, "a2d914", 0x2, 0x2}, {@none, 0x1, 0x0, "e1c6e3", 0x9d8, 0x80}]}}}, 0x20) 8.190869577s ago: executing program 2 (id=271): r0 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0x1, 0x2, {0xb, @sdr={0x31303553, 0x3}}}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@fd={0x101, 0xb, 0x4, 0x10, 0x80000000, {0x77359400}, {0x3, 0xc, 0xe, 0x79, 0x2, 0x7, "b0926632"}, 0x0, 0x4, {}, 0x4c}) 5.458340068s ago: executing program 4 (id=294): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r1, @ANYRESDEC=r0], 0x0) 3.993159843s ago: executing program 3 (id=299): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.652977602s ago: executing program 4 (id=301): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 3.617230942s ago: executing program 3 (id=303): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) 3.232137991s ago: executing program 4 (id=307): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$nilfs2(&(0x7f0000000440), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x10d27e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff7, 0x4002011, r1, 0x0) ftruncate(r1, 0x20cf01) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000300)={0xbaf, 0x6, 0x1, 0x0, 0x2, 0x0, [{0x46, 0xd6a3, 0xb0, '\x00', 0x1504}, {0x0, 0xdb0b, 0x5c82, '\x00', 0x801}]}) 2.764423779s ago: executing program 4 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7b, 0x0, 0x0) 2.735841739s ago: executing program 3 (id=309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f0000000440)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 2.588743279s ago: executing program 3 (id=310): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$eJzs3U2MW0cdAPBn73rzWeKUhIa0tAmFtgK62+yG8BFBUzUXoqbiVqniEqVpiUgDIpWgVQ5JTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBLYhTvjNf+x+6zk9196/XvJ43H783YM8/7/PZ53puZAphY9fZjo/146e2Lh//5yD823Xr+ZCdHs/043bV0K3ctLU+H9/tgajG+cf3s8X5xrZhvP+bl4tlrndduKYriXLGnuFw0i92Xrrzx7vwzR88fubD3vTcPXl2JbQcAgEnz7csH9+/821/u3/7hWw8eKjZ01ufz82Za3prO+w+lE/98/l8vepdrXaHbTMg3nUI95Jvqk6+7nEbOt7H3dbH8mfC+jQH5NpSUP9W1rt92wzjL+3GzqNVne5br9dnZxd/kRft3/Uxt9vTJUy+eqaiiwLL790NFUewRhEkLrW2dL0HldakudH0KAJWK1wtvcy62LNydzrtND1f+tafq/V8Py2C193/lx/fvrcdql1+2/b8574jD8hl+b9q4ovVYbnm78vdoa1qO1xHi/UujHn/y+02F92sMWc9B1xHG5frCoHpOrXI97tSg+sf9Yr36Rorz5/DNkN79/Yl/03H5GwP9/WfNtf9vWqpc5XUZKWwc03oLExxa1Rx2gDEQ75trJTk93tcX0zeUpG8sSd9Ukr65JH1LSTpMst+/8tPi9drS7/z4m/7G9bPtL8uw7WG5ne2eFH9ixPrE9shR2+Pifb+jutvy4/3EsJb98dhzJ776wvNXFu//r3X2/5tpf9+Tlpvpu3U5ZcjthbFdvXPvf7O3nPqAfPeG+tzTJ3/7+Y7efLUdS+9TdB1nbqvHrt7XbRuU74HefM2Qb1MK8SpIPD/ZHF6Xzz/ycTV/XtNhexthO2ZCPfJxZXuKx+tqDGtV3h8H3f+f989dRaP24slTJ55Iy3k//fNUY8Ot9ftWud7A3Ru2/8+uorf/z9bO+ka9+7iwbWl9rfu40Azr5wesX0jL+f/cd6c2tdfPHv/+qReWe+Nhwp159bXvHTt16sQPPfHEE086T6o+MgErbe6Vl38wd+bV1x4/+fKxl068dOL0woEDC/PzB762sH+ufV4/1312D6wnS//0q64JAAAAAAAAAAAAMKwfHTl85a/vfOX9xf7/S/3/cv//fOdv7v//k9D/P/aTz/3gcz/A7X3S23nCAKszIV8jhU+G+u4I5ewMr/tUijvz+KX+/7m4OK5rrs99YX0cvzfnC8MJ3DZeykwYgyTOF/jZFF9I8a8LqFDt5/1Xp7hsfOu8r+fxKYxLMZ7y3y2PZ5LHMcn9vweN65SP/9tXoY4sv9XoTlj1NgL9/WvNjf+93kPXL4bK6yKstXCj1WqtZnmtllk8gLWh6vk/c7tnjk//6Vsbb4Wc7dpTvcfLOH4p3I2q57+srPzcsDip2z9k+cs9/2dn/ruhj39hxrzmnZX7319cfb+r2GL3sOXH7c/jQO8YrfwPU/l5ax4thiu/9atQfrwgNKSPQvmbhyw/bv/FUQtOBf4vlZ8/tsceHrb8xTeo1XvrEduN8/W/2G6c3Qjbn8f2HPnvf4cTNd5M5cMkG5d5Zkc1LvP/DhLvw/hyWs4HwnyfQ5zvZNT65/sr8v+BneH9ayX/38z/O96+nuKy70Oe/zfvj80+y/Wu5Uafz3a9HmtgXH3g+p8w5qF9RrMG6jGOodVqrWyDVolKC6fyz7/q3wlVl1/1518mzv8bz+Hj/L8xPc7/G9Pj/L8xvd2u+NHSpL0xPc7/Gz/POP9vTL8vlBvnB95Vkv7pkvTdJen3l6Q/UJL+mZL0vSXpD5akP1SSfm9J+sMl6Z8rSf98SfojJemPfXz6wo9LXr/e5f4ok7r9MMli/zzff5gc+frPoO//jpJ0YHz97K19Tz//u+80F/v/z3TaQ/J1vENpuZF+O8ffS7H9ZCqlvZOW/x7S13p7B0ySOH5G/P/+aEk6ML7yfV6+3zCBav1H7Bl23KpB5/mMly+k+Isp/lKKH0/xbIrnUrwvxfOrVD9WxtO//cPB12tLv/e3hfRh7yeP/YHiOFELQ9Yntg+Mej97HMdvVHdb/h12BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhMvf24f/+uWlFcevvi4eeOnpy7tebJTo5m+3G6a6nReV1RPJHiqRT/Mj25cf3s8e74ZoprxXxRK2qd9cWz1zolbSmK4lyxp7hcNIvdl6688e78M0fPH7mw9703D15duU8AAAAA1r//BwAA///3txjh") syz_open_procfs(0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) statx(r1, 0x0, 0x1000, 0x0, 0x0) 1.635508696s ago: executing program 3 (id=312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000280)=0x8) 1.572651625s ago: executing program 4 (id=313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0904000000bf00000000020040003c0004802c0001800b0001006e756d67656e00001c0002800800014000000011080002400000009408000340000000000c000180080001006e6174000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) symlink(0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4fe, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}}, {0x800, 0x0, 0x84, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b5710c00", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000600), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x4175, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x8}, 0x18) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000080)={0x1, 'gretap0\x00', {}, 0x2}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) readlink(0x0, 0x0, 0x0) 1.572144695s ago: executing program 1 (id=314): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.428205285s ago: executing program 3 (id=315): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4421, &(0x7f0000008940)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x4020940d, &(0x7f0000000440)={0x4}) syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) truncate(&(0x7f0000000100)='./bus\x00', 0x67f9) 1.363843414s ago: executing program 1 (id=316): r0 = syz_open_dev$video4linux(&(0x7f0000001840), 0x12c0000000000, 0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8070}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x48004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x8000000, 0x1, 0x1}) 1.284329484s ago: executing program 1 (id=317): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.156732174s ago: executing program 1 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x28af, &(0x7f0000001500), &(0x7f0000ffb000), &(0x7f0000ffb000)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x20000000, r2) 1.089616393s ago: executing program 1 (id=320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x4, 0x200, &(0x7f0000000880)="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"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x13, 0x4, 0x200, 0x0}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 1.062900483s ago: executing program 0 (id=321): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 928.519823ms ago: executing program 0 (id=322): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz1\x00', {0x7, 0x8, 0x5, 0x8}, 0x12, [0x7, 0x1ff, 0x623d, 0x5, 0x0, 0x3ff, 0x100, 0x10001, 0x1, 0xa1f6, 0x80, 0x4, 0xb, 0x4, 0x3, 0x1000, 0x7ff, 0x3ff, 0x2, 0x10000, 0x13, 0x9, 0x80000000, 0x1, 0x7, 0x3, 0xe5e1, 0xe, 0x756, 0x7, 0x8001, 0x2, 0x2, 0x16, 0x0, 0x7, 0x1, 0x917d178, 0x2a89, 0x6, 0x8, 0xfffffffc, 0x8001, 0x7ff, 0x2, 0x9, 0x7, 0x0, 0xe7d, 0x7, 0x40, 0x493f, 0x4, 0x7, 0x3, 0x7, 0x9, 0x1, 0xf60, 0x6, 0x5, 0x8f3, 0x6, 0x7], [0xfffff16d, 0x0, 0x5, 0x7, 0xc84, 0x1, 0x3, 0x3, 0x7, 0x0, 0x8, 0x9, 0x6, 0x828, 0x0, 0x9, 0x4, 0x3, 0x9, 0x3, 0xa4a1, 0x1, 0x10, 0x3ff, 0x3, 0x5, 0x11, 0xf, 0x7, 0xf, 0x3, 0x9, 0x0, 0x800, 0x2, 0x3, 0x4, 0xffff, 0xc1ad, 0x8000, 0x57, 0x10000000, 0x9, 0x1, 0xffffffff, 0x61f3, 0x6431, 0x7, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x3776135e, 0x9, 0x3, 0x1, 0x7ed0, 0x3, 0x2, 0x4, 0x0, 0x6], [0x7, 0x0, 0x2, 0x80, 0xfffffffb, 0x4, 0x7, 0x6, 0xfffffffd, 0x5, 0x7, 0x80a1, 0x8, 0x1, 0x9, 0x10, 0x1, 0x0, 0x0, 0xec6, 0x6, 0x44, 0x2, 0xffffffc7, 0xd, 0x3, 0x6, 0x7, 0xce, 0xc920, 0x6, 0x23f, 0xa, 0x8001, 0x2, 0x3, 0x4, 0x3d1, 0x1e57216a, 0x3, 0xf961, 0x1, 0x4, 0x5, 0x4, 0xe, 0x5, 0xf, 0x1, 0x3, 0x40, 0x4, 0x5ac805b9, 0xc0a8, 0x6, 0x5, 0x8cd, 0x10, 0x2, 0x8000, 0x5, 0x1, 0x10000, 0xa3], [0x2, 0x0, 0x89, 0x9, 0xf, 0x5, 0x4, 0x5, 0x5, 0x1, 0x3, 0x41, 0x7, 0x0, 0xd, 0x81, 0x103, 0xc, 0x81, 0x37b39140, 0x9, 0x5, 0x2, 0x5c3, 0x5be39b06, 0x8ec, 0x1, 0x9671, 0x8, 0xfffffff9, 0x10000, 0x10, 0x2, 0xa, 0x800, 0x0, 0xe, 0x4, 0x1, 0x3, 0x1, 0x2, 0xffffffff, 0x60000000, 0x2, 0x2, 0x3ff, 0x8, 0x101, 0x0, 0x40000000, 0x2, 0x9, 0x5, 0x7, 0x217f, 0x5, 0x8001, 0x8, 0x3, 0xfffffff9, 0x7, 0x7fffffff, 0x1]}, 0x45c) 764.731903ms ago: executing program 1 (id=323): creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 764.290642ms ago: executing program 0 (id=324): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x159, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) unshare(0x24020400) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050000000000000000002e00", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 616.635762ms ago: executing program 0 (id=325): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000040)='\'t\x92\x19\xaf\x7f\xe6\xacv\xb3\xa0\x8a?`@{\xf1\xa5T\xe5\xa2\x058Sv\x03\x906\x02\xf9\x03{\xe46\x1e+~\xdex\xa8\x87t<\"B\x8e\'\x05\xeb\xe6\aU\xd8\x1a$\xe2\':\x9f\x01\x85\xcfq\xe6\x04\x81\xa3N\x0f\xb4\x8fc\xbea\x19\x17\xd5\x04\x81\xd2\xde\x1c@\x88\xfd\xa5\xea6Ys\x80\x9a(U\xa2\x17;?7\x0e\x87&\xb0\x9b+\xa3nS\xba\xb3\xa7;\x1at\x9fSCC\x9f\x11[\xb9\xf9T\xb5\xe2\x11\xe9\xef\x10z\x1b,%\xcd\x87\x0f(j\xf8\x1fo\xda\xe6\xea\x04\x05\xc8P\xcd\xba\xb0\x93Sr\xaa\xf4\b%\xf3\xfd\xf5/6n\xa1&]\x88\xbb\x17\x82\xfd\x87\xc1\x14\xde\x83\x9dK\x80\xd3?-F[\xb8\x84\x9e]`\b\x90<\xfa\x13\x06\xc0\xe4\xc1\xcbQy\x95\x02q\xbf\xe3\x03\xe9\xd4\xfa\x85l\x80\xcbq\x9fc4\xeb\x06\x1f\x1b\xb1V]\xf9\xbc\x9b\xceQW#})p\x17/\x81\x96\xb4\xfa\xc4\xc2\xa2\xef\xca\xba\x98+\xd1g\xf5\xadX+\xe0+a\x9f}\x8f\xdc\x92j\x16\x11\xc7\x95$J\x00\x00\x00', 0x0) 113.53388ms ago: executing program 0 (id=326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x10) 618.31µs ago: executing program 4 (id=327): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=328): r0 = syz_open_dev$video4linux(&(0x7f0000001840), 0x12c0000000000, 0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8070}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x8000000, 0x1, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 53.951161][ T4155] cgroup: Unknown subsys name 'net' [ 54.059928][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.491747][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.492756][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 57.650849][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 57.664847][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 57.703804][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.722382][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.731044][ T4165] device bridge_slave_0 entered promiscuous mode [ 57.766818][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.773978][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.782468][ T4165] device bridge_slave_1 entered promiscuous mode [ 57.805058][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 57.832041][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 57.850214][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.888295][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.897700][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.904845][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.914107][ T4170] device bridge_slave_0 entered promiscuous mode [ 57.958818][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.966199][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.974720][ T4170] device bridge_slave_1 entered promiscuous mode [ 57.987342][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.994534][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.002534][ T4172] device bridge_slave_0 entered promiscuous mode [ 58.012053][ T4165] team0: Port device team_slave_0 added [ 58.018063][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.025253][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.033593][ T4172] device bridge_slave_1 entered promiscuous mode [ 58.058128][ T4165] team0: Port device team_slave_1 added [ 58.085251][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.126127][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.150506][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.173206][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.180489][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.188200][ T4168] device bridge_slave_0 entered promiscuous mode [ 58.196980][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.204264][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.230972][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.245293][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.254719][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.261976][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.269680][ T4171] device bridge_slave_0 entered promiscuous mode [ 58.285061][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.293611][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.302076][ T4168] device bridge_slave_1 entered promiscuous mode [ 58.309417][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.316457][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.342664][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.362399][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.369480][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.378110][ T4171] device bridge_slave_1 entered promiscuous mode [ 58.387807][ T4170] team0: Port device team_slave_0 added [ 58.422588][ T4170] team0: Port device team_slave_1 added [ 58.445143][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.465313][ T4172] team0: Port device team_slave_0 added [ 58.473644][ T4172] team0: Port device team_slave_1 added [ 58.487204][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.503782][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.534700][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.554063][ T4165] device hsr_slave_0 entered promiscuous mode [ 58.561085][ T4165] device hsr_slave_1 entered promiscuous mode [ 58.576815][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.584002][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.610551][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.639449][ T4168] team0: Port device team_slave_0 added [ 58.654319][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.661379][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.687621][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.699104][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.706245][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.732247][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.752337][ T4168] team0: Port device team_slave_1 added [ 58.760309][ T4171] team0: Port device team_slave_0 added [ 58.770478][ T4171] team0: Port device team_slave_1 added [ 58.777134][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.784244][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.810171][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.882566][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.889522][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.915714][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.935330][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.942724][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.968908][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.984553][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.991629][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.017995][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.032804][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.039883][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.065857][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.079283][ T4170] device hsr_slave_0 entered promiscuous mode [ 59.086638][ T4170] device hsr_slave_1 entered promiscuous mode [ 59.093284][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.101247][ T4170] Cannot create hsr debugfs directory [ 59.160800][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 59.160800][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 59.186475][ T4171] device hsr_slave_0 entered promiscuous mode [ 59.193499][ T4171] device hsr_slave_1 entered promiscuous mode [ 59.201286][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.208862][ T4171] Cannot create hsr debugfs directory [ 59.217215][ T4172] device hsr_slave_0 entered promiscuous mode [ 59.223986][ T4172] device hsr_slave_1 entered promiscuous mode [ 59.230788][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.238334][ T4172] Cannot create hsr debugfs directory [ 59.240268][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 59.255565][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 59.261757][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 59.283046][ T4168] device hsr_slave_0 entered promiscuous mode [ 59.289693][ T4168] device hsr_slave_1 entered promiscuous mode [ 59.296374][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.304472][ T4168] Cannot create hsr debugfs directory [ 59.554170][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.569518][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.588238][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.602486][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.612524][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.628896][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.639160][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.649134][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.712772][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.726735][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.755116][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.764671][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.813384][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.829859][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.852804][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.865157][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.900784][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.925605][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.936097][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.948481][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.959800][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.976393][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.006190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.016083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.024441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.033816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.044272][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.055356][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.082863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.091813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.104006][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.111292][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.120394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.131726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.140539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.148842][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.155926][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.201435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.210655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.219257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.228696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.238242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.247205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.256763][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.263843][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.274879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.283106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.325126][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.334775][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.344921][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.353761][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.363498][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.372511][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.381248][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.391088][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.399400][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.406498][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.414908][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.427120][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.438291][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.459024][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.476453][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.485717][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.497441][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.518558][ T4165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.529752][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.549075][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.558448][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.567785][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.577463][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.586974][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.597983][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.607672][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.629828][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.647998][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.664604][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.678652][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.698710][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.706801][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.715739][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.724231][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.732290][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.739934][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.748229][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.756369][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.764916][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.786983][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.799305][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.810631][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.817726][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.827539][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.836229][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.845125][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.852235][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.859947][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.868580][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.877150][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.884211][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.892987][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.902853][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.911504][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.918551][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.939431][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.952237][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.964112][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.972190][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.981460][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.990358][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.998669][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.005742][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.014402][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.024973][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.033903][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.042612][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.049654][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.058563][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.067332][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.076269][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.087461][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.107552][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.117476][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.126484][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.137083][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.145676][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.154256][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.163403][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.172329][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.200686][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.208527][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.216541][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.224301][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.238298][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.240652][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 61.248453][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.258419][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 61.265848][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.280521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.289267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.313787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.322068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.330509][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 61.336650][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 61.338276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.343041][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 61.355075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.365628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.375634][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.385693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.395538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.405974][ T4171] device veth0_vlan entered promiscuous mode [ 61.425817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.438271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.454405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.494784][ T4171] device veth1_vlan entered promiscuous mode [ 61.507586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.517684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.527604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.541832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.552068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.560847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.569147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.577901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.588081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.596388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.605043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.614216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.623047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.643341][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.658136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.667429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.675907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.684590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.695036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.713183][ T4165] device veth0_vlan entered promiscuous mode [ 61.755716][ T4165] device veth1_vlan entered promiscuous mode [ 61.773129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.791670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.809304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.817848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.831431][ T4171] device veth0_macvtap entered promiscuous mode [ 61.848896][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.866751][ T4171] device veth1_macvtap entered promiscuous mode [ 61.917699][ T4165] device veth0_macvtap entered promiscuous mode [ 61.926689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.941726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.950545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.959370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.970120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.981490][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.988934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.998442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.009505][ T4165] device veth1_macvtap entered promiscuous mode [ 62.034904][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.046307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.055838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.064906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.075071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.083758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.095738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.103375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.119752][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.129728][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.138771][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.147768][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.164637][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.175718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.184351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.192285][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.205580][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.216680][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.229591][ T4170] device veth0_vlan entered promiscuous mode [ 62.244341][ T4170] device veth1_vlan entered promiscuous mode [ 62.254752][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.262308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.271345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.282092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.296135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.305075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.315151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.323414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.354983][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.366696][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.378438][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.410876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.425792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.435192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.449464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.458953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.475324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.484498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.498972][ T4170] device veth0_macvtap entered promiscuous mode [ 62.532290][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.546807][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.556874][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.567967][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.587080][ T4170] device veth1_macvtap entered promiscuous mode [ 62.629912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.638931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.647683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.656177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.665108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.673423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.692866][ T4172] device veth0_vlan entered promiscuous mode [ 62.723965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.734932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.753262][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.772029][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.782555][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.793856][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.806211][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.816685][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.830931][ T4172] device veth1_vlan entered promiscuous mode [ 62.839192][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.839385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.857616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.866566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.900709][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.915710][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.927388][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.938618][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.940908][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.963239][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.972803][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.981574][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.990428][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.006701][ T441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.016288][ T441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.024151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.034413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.044303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.055034][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.063421][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.072640][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.081422][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.106157][ T4168] device veth0_vlan entered promiscuous mode [ 63.120509][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.129060][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.179450][ T4172] device veth0_macvtap entered promiscuous mode [ 63.187259][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.194637][ T4168] device veth1_vlan entered promiscuous mode [ 63.203856][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.213051][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.221981][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.238770][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.243498][ T4172] device veth1_macvtap entered promiscuous mode [ 63.258944][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.268127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.277666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.286515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.295125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.303594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.311628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.319280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.326684][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 63.332928][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 63.374357][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.381106][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.399562][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.403074][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.410362][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 63.429484][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.445752][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 63.452139][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.462383][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.467985][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 63.474032][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.491585][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.504760][ T4168] device veth0_macvtap entered promiscuous mode [ 63.516617][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.525242][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.534362][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.543355][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.552265][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.562603][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.578364][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.589603][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.605880][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.620878][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.631500][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.638776][ T4244] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.643380][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.671081][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.681741][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.691639][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.700668][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.709363][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.759029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.779455][ T4168] device veth1_macvtap entered promiscuous mode [ 63.907987][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.936783][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.946798][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.963917][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.976070][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.992255][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.005767][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.017655][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.032485][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.047553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.066231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.116976][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.140846][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.162990][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.193954][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.237956][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.254673][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.262557][ T4248] loop2: detected capacity change from 0 to 32768 [ 64.268394][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.283811][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.296327][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.307075][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.316482][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.325832][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.334742][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.355947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.365612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.489101][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.493025][ T4256] loop0: detected capacity change from 0 to 4096 [ 64.519307][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.527723][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.538399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.546933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.588870][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.605908][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.614122][ T4210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.653950][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.678507][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.685281][ T4256] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 64.689272][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.709795][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.755800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.045490][ T4210] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.069892][ T4210] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.082138][ T4270] Zero length message leads to an empty skb [ 65.293761][ T4279] loop3: detected capacity change from 0 to 512 [ 65.380611][ T4276] loop4: detected capacity change from 0 to 32768 [ 65.387530][ T4210] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.396791][ T4210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.408875][ T4210] usb 2-1: SerialNumber: syz [ 65.424603][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 65.431221][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 65.432148][ T4279] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 65.437371][ T4276] (syz.4.10,4276,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 65.460919][ T4276] (syz.4.10,4276,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 65.482871][ T4276] (syz.4.10,4276,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 65.500052][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 65.509471][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 65.520366][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 65.530234][ T4276] JBD2: Ignoring recovery information on journal [ 65.575604][ T4276] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 65.705376][ T4210] usb 2-1: 0:2 : does not exist [ 65.790876][ T4210] usb 2-1: USB disconnect, device number 2 [ 65.972588][ T4168] ocfs2: Unmounting device (7,4) on (node local) [ 66.083584][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.309485][ T4291] loop4: detected capacity change from 0 to 256 [ 66.336563][ T4284] loop2: detected capacity change from 0 to 32768 [ 66.418997][ T4284] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 66.455204][ T4284] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 66.500262][ T4284] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 66.634950][ T4289] loop3: detected capacity change from 0 to 32768 [ 66.676132][ T4284] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 66.730532][ T4289] ======================================================= [ 66.730532][ T4289] WARNING: The mand mount option has been deprecated and [ 66.730532][ T4289] and is ignored by this kernel. Remove the mand [ 66.730532][ T4289] option from the mount to silence this warning. [ 66.730532][ T4289] ======================================================= [ 66.819097][ T4289] JBD2: Ignoring recovery information on journal [ 66.965231][ T4304] loop4: detected capacity change from 0 to 256 [ 66.990624][ T4289] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 67.095518][ T4304] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 67.158445][ T26] audit: type=1800 audit(1735349558.443:2): pid=4304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 67.229550][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 67.355524][ T4293] loop1: detected capacity change from 0 to 40427 [ 67.443544][ T4319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 67.474511][ T4293] F2FS-fs (loop1): invalid crc value [ 67.544527][ T4293] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.610282][ T4293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 67.885042][ T4165] attempt to access beyond end of device [ 67.885042][ T4165] loop1: rw=2049, want=45104, limit=40427 [ 67.966839][ T4335] loop2: detected capacity change from 0 to 32768 [ 68.106244][ T4335] (syz.2.31,4335,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 68.131303][ T4335] (syz.2.31,4335,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.145066][ T4335] (syz.2.31,4335,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.178894][ T4335] JBD2: Ignoring recovery information on journal [ 68.226572][ T4330] loop4: detected capacity change from 0 to 32768 [ 68.259670][ T4335] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 68.297997][ T4330] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.30 (4330) [ 68.370380][ T4207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.380035][ T4330] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 68.431368][ T4330] BTRFS info (device loop4): enabling auto defrag [ 68.454660][ T4171] ocfs2: Unmounting device (7,2) on (node local) [ 68.470785][ T4330] BTRFS info (device loop4): turning on async discard [ 68.488666][ T4330] BTRFS info (device loop4): max_inline at 4096 [ 68.521084][ T4330] BTRFS info (device loop4): force clearing of disk cache [ 68.538580][ T4330] BTRFS info (device loop4): using free space tree [ 68.572195][ T4330] BTRFS info (device loop4): has skinny extents [ 68.613599][ T4353] loop3: detected capacity change from 0 to 4096 [ 68.722781][ T4353] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 68.790380][ T4207] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.817173][ T4207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.850858][ T4330] BTRFS info (device loop4): enabling ssd optimizations [ 68.870663][ T4330] BTRFS info (device loop4): clearing free space tree [ 68.894924][ T4330] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.905294][ T4330] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.922362][ T4207] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.957065][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.972829][ T4330] BTRFS info (device loop4): creating free space tree [ 68.985844][ T4207] usb 1-1: SerialNumber: syz [ 68.992652][ T4330] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.010049][ T4330] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.049809][ T4330] BTRFS info (device loop4): checking UUID tree [ 69.292590][ T4207] usb 1-1: 0:2 : does not exist [ 69.390240][ T4207] usb 1-1: USB disconnect, device number 2 [ 69.687273][ T4401] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 69.692637][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.746761][ T4384] loop3: detected capacity change from 0 to 32768 [ 70.226190][ T4408] loop4: detected capacity change from 0 to 4096 [ 70.256892][ T4405] kvm [4402]: vcpu0, guest rIP: 0x1a3 disabled perfctr wrmsr: 0xc1 data 0x8000 [ 70.326798][ T4408] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 70.378202][ T4408] ntfs3: loop4: Failed to load $Extend. [ 71.166686][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.170242][ T4209] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.173276][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.262342][ T4436] loop3: detected capacity change from 0 to 32768 [ 71.328018][ T4436] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.53 (4436) [ 71.390166][ T4436] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 71.411717][ T4436] BTRFS info (device loop3): enabling auto defrag [ 71.418186][ T4436] BTRFS info (device loop3): turning on async discard [ 71.441321][ T4436] BTRFS info (device loop3): max_inline at 4096 [ 71.450293][ T4436] BTRFS info (device loop3): force clearing of disk cache [ 71.457424][ T4436] BTRFS info (device loop3): using free space tree [ 71.516095][ T4436] BTRFS info (device loop3): has skinny extents [ 71.550284][ T4209] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 71.572792][ T4209] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 71.628135][ T4209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.698024][ T4209] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.718816][ T4436] BTRFS info (device loop3): enabling ssd optimizations [ 71.736518][ T4436] BTRFS info (device loop3): clearing free space tree [ 71.754662][ T4209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.774102][ T4436] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.842396][ T4209] usb 5-1: config 0 descriptor?? [ 71.855819][ T4436] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.910936][ T4438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.932615][ T4209] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 71.992304][ T4436] BTRFS info (device loop3): creating free space tree [ 72.004834][ T4436] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.029883][ T4436] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.109401][ T4436] BTRFS info (device loop3): checking UUID tree [ 72.599397][ T4486] overlayfs: failed to resolve './file0/../file0': -2 [ 72.804123][ T4497] loop3: detected capacity change from 0 to 4096 [ 72.830069][ T4207] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.855920][ T26] audit: type=1326 audit(1735349564.143:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 72.878789][ T26] audit: type=1326 audit(1735349564.153:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 72.901204][ T26] audit: type=1326 audit(1735349564.153:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 72.932348][ T26] audit: type=1326 audit(1735349564.153:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 72.958323][ T26] audit: type=1326 audit(1735349564.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 73.023007][ T26] audit: type=1326 audit(1735349564.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 73.068906][ T26] audit: type=1326 audit(1735349564.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 73.093691][ T4207] usb 1-1: Using ep0 maxpacket: 32 [ 73.126986][ T26] audit: type=1326 audit(1735349564.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 73.157363][ T26] audit: type=1326 audit(1735349564.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 73.191568][ T26] audit: type=1326 audit(1735349564.253:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4500 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13df232d29 code=0x7ffc0000 [ 73.260244][ T4207] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 73.279499][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.290873][ T4207] usb 1-1: config 0 descriptor?? [ 73.613370][ T4491] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.644499][ T4207] pwc: Logitech ViewPort AV 100 webcam detected. [ 73.925915][ T4207] pwc: send_video_command error -71 [ 73.925913][ T4208] usb 5-1: USB disconnect, device number 2 [ 73.937651][ T4207] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 73.956552][ T4207] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 73.980681][ T4491] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 73.994253][ T4491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.998659][ T4207] usb 1-1: USB disconnect, device number 3 [ 74.017597][ T4491] usb 4-1: config 0 descriptor?? [ 74.025955][ T4532] netlink: 48 bytes leftover after parsing attributes in process `syz.2.83'. [ 74.072708][ T4491] pwc: Creative Labs Webcam 5 detected. [ 74.290929][ T4534] loop4: detected capacity change from 0 to 32768 [ 74.303479][ T4513] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.342037][ T4491] pwc: Failed to set LED on/off time (-71) [ 74.362732][ T4491] pwc: send_video_command error -71 [ 74.367968][ T4491] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 74.377780][ T4491] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 74.389458][ T4534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.84 (4534) [ 74.415852][ T4491] usb 4-1: USB disconnect, device number 2 [ 74.457045][ T4534] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 74.466232][ T4534] BTRFS info (device loop4): enabling auto defrag [ 74.473386][ T4534] BTRFS info (device loop4): doing ref verification [ 74.480542][ T4534] BTRFS info (device loop4): use no compression [ 74.486795][ T4534] BTRFS info (device loop4): force clearing of disk cache [ 74.495463][ T4534] BTRFS info (device loop4): max_inline at 4096 [ 74.502315][ T4534] BTRFS info (device loop4): metadata ratio 5 [ 74.508394][ T4534] BTRFS info (device loop4): using free space tree [ 74.515541][ T4534] BTRFS info (device loop4): has skinny extents [ 74.716609][ T4534] BTRFS info (device loop4): enabling ssd optimizations [ 74.726334][ T4534] BTRFS info (device loop4): clearing free space tree [ 74.733776][ T4534] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.744160][ T4534] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.764201][ T4534] BTRFS info (device loop4): creating free space tree [ 74.772318][ T4534] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.781933][ T4534] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.116773][ T4582] loop3: detected capacity change from 0 to 512 [ 75.287874][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.366207][ T4582] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.494657][ T4582] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:338: inode #15: comm syz.3.95: verity file corrupted; can't find descriptor [ 75.535688][ T4582] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 75.575694][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.583058][ T4595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.624308][ T4582] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:338: inode #15: comm syz.3.95: verity file corrupted; can't find descriptor [ 75.660383][ T4582] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 75.948073][ T4608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.955706][ T4608] IPv6: NLM_F_CREATE should be set when creating new route [ 76.984705][ T4617] loop3: detected capacity change from 0 to 32768 [ 77.082412][ T4617] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.105 (4617) [ 77.186870][ T4617] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 77.250086][ T4617] BTRFS info (device loop3): enabling auto defrag [ 77.256559][ T4617] BTRFS info (device loop3): doing ref verification [ 77.310123][ T4617] BTRFS info (device loop3): use no compression [ 77.316507][ T4617] BTRFS info (device loop3): force clearing of disk cache [ 77.390972][ T4617] BTRFS info (device loop3): max_inline at 4096 [ 77.418882][ T4617] BTRFS info (device loop3): metadata ratio 5 [ 77.442046][ T4617] BTRFS info (device loop3): using free space tree [ 77.448592][ T4617] BTRFS info (device loop3): has skinny extents [ 77.476573][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 77.818008][ T4617] BTRFS info (device loop3): enabling ssd optimizations [ 77.843036][ T4617] BTRFS info (device loop3): clearing free space tree [ 77.896686][ T4617] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.946201][ T4617] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.022580][ T4617] BTRFS info (device loop3): creating free space tree [ 78.046112][ T4617] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.079497][ T4617] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.081711][ T4691] loop4: detected capacity change from 0 to 256 [ 78.275019][ T4691] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 78.702303][ T4705] program syz.3.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.506898][ T4702] loop4: detected capacity change from 0 to 40427 [ 79.623277][ T4702] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 79.637365][ T4702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.694664][ T4702] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.742793][ T4725] loop3: detected capacity change from 0 to 32768 [ 79.779416][ T4702] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.793810][ T4702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.837858][ T4725] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.136 (4725) [ 79.866750][ T4725] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 79.889801][ T4725] BTRFS info (device loop3): doing ref verification [ 79.910612][ T4398] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 79.912656][ T4725] BTRFS info (device loop3): turning off barriers [ 79.926278][ T4168] attempt to access beyond end of device [ 79.926278][ T4168] loop4: rw=2049, want=45104, limit=40427 [ 79.955142][ T4725] BTRFS info (device loop3): enabling auto defrag [ 79.966499][ T4725] BTRFS info (device loop3): turning on sync discard [ 79.986351][ T4725] BTRFS info (device loop3): force clearing of disk cache [ 80.013441][ T4725] BTRFS info (device loop3): using free space tree [ 80.027051][ T4725] BTRFS info (device loop3): has skinny extents [ 80.249161][ T4725] BTRFS info (device loop3): enabling ssd optimizations [ 80.267932][ T4725] BTRFS info (device loop3): clearing free space tree [ 80.280916][ T4398] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 80.285499][ T4725] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.299340][ T4398] usb 2-1: config 0 has no interface number 0 [ 80.299382][ T4398] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 41321, setting to 64 [ 80.336933][ T4725] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.429025][ T4725] BTRFS info (device loop3): creating free space tree [ 80.444761][ T4725] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.455420][ T4398] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 80.465202][ T4725] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.477860][ T4398] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 80.486876][ T4398] usb 2-1: Product: syz [ 80.491680][ T4398] usb 2-1: Manufacturer: syz [ 80.499473][ T4398] usb 2-1: SerialNumber: syz [ 80.508297][ T4398] usb 2-1: config 0 descriptor?? [ 80.530925][ T4733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.565601][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 80.565617][ T26] audit: type=1800 audit(1735349571.853:72): pid=4725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.136" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 80.797240][ T4398] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 80.820957][ T4398] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 80.846950][ T4398] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 80.866235][ T4398] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 80.910623][ T4398] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 81.001952][ T4398] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 81.124748][ T4398] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 81.217867][ T4398] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 81.277499][ T4398] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 81.323314][ T4398] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 81.376640][ T4398] usb 2-1: USB disconnect, device number 3 [ 81.404900][ T2363] cfg80211: failed to load regulatory.db [ 81.522673][ T4207] Bluetooth: hci5: command 0x1003 tx timeout [ 81.528888][ T4166] Bluetooth: hci5: sending frame failed (-49) [ 81.548179][ T4398] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 81.645290][ T4398] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 81.676073][ T4398] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 81.707951][ T4398] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 81.738152][ T4792] netlink: 676 bytes leftover after parsing attributes in process `syz.0.156'. [ 81.751719][ T4398] keyspan 2-1:0.107: device disconnected [ 82.232982][ T4790] binder: 4789:4790 ioctl c0306201 0 returned -14 [ 82.321938][ T4396] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.350740][ T4803] tun0: tun_chr_ioctl cmd 2147767506 [ 82.519736][ T4794] loop3: detected capacity change from 0 to 32768 [ 82.570577][ T4396] usb 5-1: Using ep0 maxpacket: 16 [ 82.602428][ T4794] read_mapping_page failed! [ 82.608164][ T4794] ERROR: (device loop3): txCommit: [ 82.608164][ T4794] [ 82.628928][ T4794] ERROR: (device loop3): remounting filesystem as read-only [ 82.690911][ T4396] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.708712][ T4396] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.776731][ T4817] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 82.786269][ T4817] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.872268][ T4396] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.882622][ T4396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.891891][ T4396] usb 5-1: Product: syz [ 82.896194][ T4396] usb 5-1: Manufacturer: syz [ 82.902027][ T4396] usb 5-1: SerialNumber: syz [ 83.142937][ T4207] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.386560][ T4841] input: syz1 as /devices/virtual/input/input6 [ 83.401247][ T4396] usb 5-1: cannot find UAC_HEADER [ 83.407197][ T4207] usb 2-1: Using ep0 maxpacket: 32 [ 83.441859][ T4396] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 83.470829][ T4396] usb 5-1: USB disconnect, device number 3 [ 83.550544][ T4207] usb 2-1: config 0 has an invalid interface number: 111 but max is 1 [ 83.570782][ T4207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.587397][ T4207] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.596581][ T4207] usb 2-1: config 0 has no interface number 0 [ 83.613084][ T4589] Bluetooth: hci5: command 0x1001 tx timeout [ 83.626033][ T4166] Bluetooth: hci5: sending frame failed (-49) [ 83.718428][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.790286][ T4207] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 83.802893][ T4207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.820029][ T4207] usb 2-1: Product: syz [ 83.828778][ T4207] usb 2-1: Manufacturer: syz [ 83.839099][ T4207] usb 2-1: SerialNumber: syz [ 83.852739][ T4207] usb 2-1: config 0 descriptor?? [ 84.120180][ T4207] snd-usb-6fire 2-1:0.111: unable to receive device firmware state. [ 84.132103][ T4862] loop4: detected capacity change from 0 to 2048 [ 84.138496][ T4207] snd-usb-6fire: probe of 2-1:0.111 failed with error -71 [ 84.160212][ T4207] usb 2-1: USB disconnect, device number 4 [ 84.301295][ T4862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.328088][ T26] audit: type=1800 audit(1735349575.613:73): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.182" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 84.557611][ T4872] loop4: detected capacity change from 0 to 512 [ 84.593928][ T4874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.186'. [ 84.618358][ T4874] unsupported nlmsg_type 40 [ 84.655046][ T4872] EXT4-fs (loop4): inline encryption not supported [ 84.723287][ T4872] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.782752][ T4872] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 84.798632][ T4872] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.185: Corrupt directory, running e2fsck is recommended [ 84.831687][ T4872] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 84.850411][ T4872] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.185: corrupted in-inode xattr [ 84.867846][ T4872] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.185: couldn't read orphan inode 15 (err -117) [ 84.881068][ T4872] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,inlinecrypt,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 84.922400][ T4872] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.937124][ T4872] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 84.948317][ T4872] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.185: Corrupt directory, running e2fsck is recommended [ 84.964290][ T4872] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.977653][ T4872] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 84.988668][ T4872] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.185: Corrupt directory, running e2fsck is recommended [ 85.010303][ T4213] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.120642][ T4396] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.147688][ T4894] IPv6: Can't replace route, no match found [ 85.265062][ T4898] loop4: detected capacity change from 0 to 128 [ 85.290056][ T4213] usb 2-1: Using ep0 maxpacket: 32 [ 85.335362][ T4892] loop3: detected capacity change from 0 to 32768 [ 85.356361][ T4898] FAT-fs (loop4): bogus number of FAT sectors [ 85.370618][ T4396] usb 1-1: Using ep0 maxpacket: 16 [ 85.378031][ T4898] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 85.387433][ T4898] FAT-fs (loop4): Can't find a valid FAT filesystem [ 85.410701][ T4213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.436315][ T26] audit: type=1804 audit(1735349576.723:74): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.192" name="/newroot/31/file0/file1" dev="loop3" ino=4 res=1 errno=0 [ 85.490837][ T4396] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 85.502617][ T4396] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 85.541891][ T4396] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.573841][ T4396] usb 1-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 85.592725][ T4213] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 85.593856][ T4396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.610933][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.610960][ T4213] usb 2-1: Product: syz [ 85.610978][ T4213] usb 2-1: Manufacturer: syz [ 85.610994][ T4213] usb 2-1: SerialNumber: syz [ 85.635871][ T4213] usb 2-1: config 0 descriptor?? [ 85.643369][ T4396] usb 1-1: config 0 descriptor?? [ 85.651321][ T4211] Bluetooth: hci5: command 0x1009 tx timeout [ 85.738205][ T4396] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 85.872615][ T4908] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 85.947877][ T4213] usb 1-1: USB disconnect, device number 4 [ 85.992827][ T4908] team0: Port device netdevsim0 added [ 86.046144][ T4908] syz.4.199 (4908) used greatest stack depth: 18744 bytes left [ 86.158842][ T4913] loop4: detected capacity change from 0 to 512 [ 86.238180][ T4913] EXT4-fs (loop4): inline encryption not supported [ 86.265421][ T4913] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.281281][ T4913] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 86.296817][ T4913] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.201: Corrupt directory, running e2fsck is recommended [ 86.313607][ T4913] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 86.328633][ T4913] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.201: corrupted in-inode xattr [ 86.349304][ T4913] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.201: couldn't read orphan inode 15 (err -117) [ 86.367891][ T4913] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,inlinecrypt,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 86.420635][ T4913] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.436252][ T4913] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 86.439178][ T4911] loop3: detected capacity change from 0 to 40427 [ 86.455602][ T4913] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.201: Corrupt directory, running e2fsck is recommended [ 86.473325][ T4917] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.485324][ T4917] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 86.495601][ T4917] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.201: Corrupt directory, running e2fsck is recommended [ 86.513084][ T4913] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.526029][ T4913] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 86.537191][ T4913] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.201: Corrupt directory, running e2fsck is recommended [ 86.566008][ T4913] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.589493][ T4913] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.201: path /35/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 86.609210][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.635350][ T4913] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 8: comm syz.4.201: path /35/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 86.649030][ T4925] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.416271][ T4937] loop4: detected capacity change from 0 to 32768 [ 87.523219][ T4937] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 87.570657][ T4937] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #3909091328 [ 87.588484][ T4937] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 87.600572][ T4937] OCFS2: File system is now read-only. [ 87.606159][ T4937] (syz.4.208,4937,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 87.614712][ T4937] (syz.4.208,4937,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 87.623490][ T4937] (syz.4.208,4937,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 87.632059][ T4937] (syz.4.208,4937,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 87.640639][ T4937] (syz.4.208,4937,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 87.648837][ T4937] (syz.4.208,4937,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 87.657068][ T4937] (syz.4.208,4937,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 87.666365][ T4937] (syz.4.208,4937,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 87.675100][ T4937] (syz.4.208,4937,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 87.684450][ T4937] (syz.4.208,4937,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 87.693942][ T4937] (syz.4.208,4937,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 87.704441][ T4937] (syz.4.208,4937,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 87.716484][ T4937] (syz.4.208,4937,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 87.727453][ T4937] (syz.4.208,4937,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 87.732414][ T2363] usb 2-1: USB disconnect, device number 5 [ 87.737007][ T4937] (syz.4.208,4937,0):ocfs2_symlink:1911 ERROR: status = -30 [ 87.780538][ T4937] (syz.4.208,4937,0):ocfs2_symlink:2065 ERROR: status = -30 [ 87.792492][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.863366][ T4168] ocfs2: Unmounting device (7,4) on (node local) [ 88.064975][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 88.229558][ T4959] overlayfs: failed to resolve './file0': -2 [ 88.324418][ T4963] netlink: 156 bytes leftover after parsing attributes in process `syz.0.219'. [ 88.535821][ T2363] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.623181][ T4957] loop4: detected capacity change from 0 to 40427 [ 88.717433][ T4957] F2FS-fs (loop4): Unrecognized mount option "memory=low" or missing value [ 88.910938][ T2363] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 88.929601][ T2363] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 88.949069][ T2363] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.980655][ T2363] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 88.989523][ T2363] usb 4-1: config 0 has no interface number 0 [ 89.006900][ T2363] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.033655][ T2363] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.060448][ T2363] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.093043][ T2363] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 89.315686][ T4983] loop4: detected capacity change from 0 to 32768 [ 89.323878][ T2363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.334009][ T2363] usb 4-1: config 0 descriptor?? [ 89.365144][ T4983] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.228 (4983) [ 89.381403][ T2363] gspca_main: spca561-2.14.0 probing abcd:cdee [ 89.422417][ T4983] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 89.432459][ T4983] BTRFS info (device loop4): doing ref verification [ 89.439073][ T4983] BTRFS info (device loop4): turning off barriers [ 89.446111][ T4983] BTRFS info (device loop4): enabling auto defrag [ 89.453626][ T4983] BTRFS info (device loop4): turning on sync discard [ 89.461170][ T4983] BTRFS info (device loop4): force clearing of disk cache [ 89.468291][ T4983] BTRFS info (device loop4): using free space tree [ 89.475346][ T4983] BTRFS info (device loop4): has skinny extents [ 89.666399][ T4983] BTRFS info (device loop4): enabling ssd optimizations [ 89.696464][ T4983] BTRFS info (device loop4): clearing free space tree [ 89.704100][ T4983] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.715218][ T4983] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.758239][ T2363] spca561: probe of 4-1:0.156 failed with error -22 [ 89.778252][ T4983] BTRFS info (device loop4): creating free space tree [ 89.785991][ T4983] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.795702][ T4983] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.816005][ T2363] usb 4-1: MIDIStreaming interface descriptor not found [ 89.851692][ T2363] usb 4-1: USB disconnect, device number 3 [ 90.001911][ T26] audit: type=1800 audit(1735349581.293:75): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.228" name="file1" dev="loop4" ino=263 res=0 errno=0 [ 90.049566][ T26] audit: type=1804 audit(1735349581.323:76): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.228" name="/newroot/40/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=263 res=1 errno=0 [ 90.098278][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.298074][ T5032] loop3: detected capacity change from 0 to 256 [ 90.341299][ T5032] exfat: Deprecated parameter 'namecase' [ 90.342150][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 90.347019][ T5032] exfat: Unknown parameter 'keep_last_dots' [ 90.688507][ T5032] loop3: detected capacity change from 0 to 2048 [ 90.848652][ T5032] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.874039][ T4180] Bluetooth: Unknown LE signaling command 0x21 [ 90.881320][ T4180] Bluetooth: Wrong link type (-22) [ 90.925387][ T5032] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.309486][ T5061] netlink: 48 bytes leftover after parsing attributes in process `syz.4.248'. [ 91.367723][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.379083][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.408700][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.437328][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.464757][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.493201][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.510147][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.524753][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.532778][ T5069] overlayfs: failed to resolve './file0/../file0': -2 [ 91.549001][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 91.562997][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.572978][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.581821][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.589750][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.609161][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.617176][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.626055][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.634343][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.655591][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.666049][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.675469][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.684187][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.705548][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.718539][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.727083][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.736953][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.745168][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.754929][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.764872][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.773050][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.781405][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.788867][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.797460][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.805790][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.814219][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.822445][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.830683][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.838070][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.846318][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.854530][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.863437][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.871511][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.878949][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.887172][ T4398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 91.900846][ T4398] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.285805][ T5093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 92.343049][ T5093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 92.466166][ T5097] process 'syz.0.265' launched './file1' with NULL argv: empty string added [ 92.767237][ T5112] capability: warning: `syz.1.273' uses deprecated v2 capabilities in a way that may be insecure [ 92.810489][ T5112] sg_read: process 144 (syz.1.273) changed security contexts after opening file descriptor, this is not allowed. [ 93.087821][ T5120] tmpfs: Bad value for 'mpol' [ 93.119024][ T5091] loop3: detected capacity change from 0 to 32768 [ 93.196008][ T5091] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.259 (5091) [ 93.263016][ T5091] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.292084][ T5091] BTRFS info (device loop3): enabling auto defrag [ 93.315584][ T5091] BTRFS info (device loop3): doing ref verification [ 93.360081][ T5091] BTRFS info (device loop3): use no compression [ 93.396529][ T5091] BTRFS info (device loop3): force clearing of disk cache [ 93.430074][ T5091] BTRFS info (device loop3): max_inline at 4096 [ 93.450578][ T5091] BTRFS info (device loop3): disabling free space tree [ 93.487228][ T5091] BTRFS info (device loop3): has skinny extents [ 93.753725][ T5114] loop4: detected capacity change from 0 to 32768 [ 93.813048][ T5091] BTRFS info (device loop3): enabling ssd optimizations [ 93.832147][ T5114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.272 (5114) [ 93.849137][ T5091] BTRFS info (device loop3): clearing free space tree [ 93.857301][ T5091] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.877740][ T5091] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.910741][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 93.985043][ T5114] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 94.030917][ T5114] BTRFS info (device loop4): using free space tree [ 94.070802][ T5114] BTRFS info (device loop4): has skinny extents [ 94.283900][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.320154][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.387795][ T5124] device bridge_slave_0 entered promiscuous mode [ 94.399058][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.406287][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.417948][ T5124] device bridge_slave_1 entered promiscuous mode [ 94.451299][ T5114] BTRFS info (device loop4): enabling ssd optimizations [ 94.653108][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.683776][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.889207][ T5124] team0: Port device team_slave_0 added [ 94.933195][ T5124] team0: Port device team_slave_1 added [ 95.012477][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.034906][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.119796][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.155130][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.169664][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.261529][ T4591] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.294977][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.398250][ T5124] device hsr_slave_0 entered promiscuous mode [ 95.405102][ T4209] Bluetooth: hci4: command 0x0409 tx timeout [ 95.429268][ T5124] device hsr_slave_1 entered promiscuous mode [ 95.454166][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.494004][ T5124] Cannot create hsr debugfs directory [ 95.540316][ T4591] usb 1-1: Using ep0 maxpacket: 16 [ 95.666236][ T5124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.680259][ T4591] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.710282][ T4591] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.786101][ T4209] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 95.795776][ T5124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.888787][ T5124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.899511][ T4591] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.909745][ T4591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.919597][ T4591] usb 1-1: Product: syz [ 95.924072][ T4591] usb 1-1: Manufacturer: syz [ 95.928682][ T4591] usb 1-1: SerialNumber: syz [ 95.966628][ T5218] loop3: detected capacity change from 0 to 128 [ 96.001902][ T5124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.049318][ T5218] FAT-fs (loop3): Directory bread(block 32) failed [ 96.057563][ T5218] FAT-fs (loop3): Directory bread(block 33) failed [ 96.073937][ T5218] FAT-fs (loop3): Directory bread(block 34) failed [ 96.083165][ T5218] FAT-fs (loop3): Directory bread(block 35) failed [ 96.089758][ T5218] FAT-fs (loop3): Directory bread(block 36) failed [ 96.103977][ T5218] FAT-fs (loop3): Directory bread(block 37) failed [ 96.114051][ T5218] FAT-fs (loop3): Directory bread(block 38) failed [ 96.128234][ T5218] FAT-fs (loop3): Directory bread(block 39) failed [ 96.139563][ T5218] FAT-fs (loop3): Directory bread(block 40) failed [ 96.153405][ T5218] FAT-fs (loop3): Directory bread(block 41) failed [ 96.163443][ T4209] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.194866][ T4209] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.240492][ T5124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.268428][ T5124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.295707][ T5124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.309547][ T5218] attempt to access beyond end of device [ 96.309547][ T5218] loop3: rw=0, want=4116, limit=128 [ 96.321679][ T5218] Buffer I/O error on dev loop3, logical block 1028, async page read [ 96.329905][ T5218] attempt to access beyond end of device [ 96.329905][ T5218] loop3: rw=0, want=167968, limit=128 [ 96.341796][ T5218] Buffer I/O error on dev loop3, logical block 41991, async page read [ 96.342239][ T5124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.351980][ T5218] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000a009) [ 96.370615][ T4209] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.372968][ T5218] FAT-fs (loop3): Filesystem has been set read-only [ 96.379663][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.379686][ T4209] usb 5-1: Product: syz [ 96.379701][ T4209] usb 5-1: Manufacturer: syz [ 96.379715][ T4209] usb 5-1: SerialNumber: syz [ 96.390368][ T5218] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000a009) [ 96.425213][ T5218] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000a009) [ 96.433606][ T4591] usb 1-1: cannot find UAC_HEADER [ 96.447322][ T5218] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000a009) [ 96.461337][ T5218] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000a009) [ 96.475621][ T5218] attempt to access beyond end of device [ 96.475621][ T5218] loop3: rw=0, want=4116, limit=128 [ 96.487863][ T4591] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 96.517563][ T5218] Buffer I/O error on dev loop3, logical block 1028, async page read [ 96.528879][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.545587][ T5218] attempt to access beyond end of device [ 96.545587][ T5218] loop3: rw=0, want=167968, limit=128 [ 96.576791][ T5218] Buffer I/O error on dev loop3, logical block 41991, async page read [ 96.595079][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.615050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.635525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.637337][ T5038] usb 1-1: USB disconnect, device number 5 [ 96.673129][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.707063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.719728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.728687][ T4209] usb 5-1: 0:2 : does not exist [ 96.743059][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.750282][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.814011][ T4209] usb 5-1: USB disconnect, device number 4 [ 96.821204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.861507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.878739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.893526][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.900764][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.942803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.040505][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.091130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.107162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.126992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.142711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.195269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.250048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.294201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.311433][ T5235] loop4: detected capacity change from 0 to 256 [ 97.319333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.329140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.329775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.332001][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.453471][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453536][ T5235] FAT-fs (loop4): Filesystem has been set read-only [ 97.453660][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453713][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453744][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453861][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453888][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453916][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.453983][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.454010][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.454039][ T5235] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 97.456767][ T26] audit: type=1800 audit(1735349588.743:77): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.301" name="file1" dev="loop4" ino=1048593 res=0 errno=0 [ 97.466800][ T441] device hsr_slave_0 left promiscuous mode [ 97.468458][ T441] device hsr_slave_1 left promiscuous mode [ 97.475571][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.612775][ T4591] Bluetooth: hci4: command 0x041b tx timeout [ 97.623815][ T5235] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 97.649272][ T441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.651743][ T441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.651769][ T441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.652359][ T441] device bridge_slave_1 left promiscuous mode [ 97.653608][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.706148][ T441] device bridge_slave_0 left promiscuous mode [ 97.706293][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.756127][ T441] device veth1_macvtap left promiscuous mode [ 97.756387][ T441] device veth0_macvtap left promiscuous mode [ 97.756483][ T441] device veth1_vlan left promiscuous mode [ 97.756681][ T441] device veth0_vlan left promiscuous mode [ 97.792213][ T5249] loop4: detected capacity change from 0 to 4096 [ 97.889829][ T5252] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.961887][ T26] audit: type=1800 audit(1735349589.253:78): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.307" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 98.314553][ T5256] loop3: detected capacity change from 0 to 2048 [ 98.472000][ T5256] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.674416][ T441] team0 (unregistering): Port device team_slave_1 removed [ 98.818984][ T5268] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.103251][ T441] team0 (unregistering): Port device team_slave_0 removed [ 99.196007][ T441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.223207][ T441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.561459][ T441] bond0 (unregistering): Released all slaves [ 99.642870][ T4591] Bluetooth: hci4: command 0x040f tx timeout [ 99.654392][ T5276] lo speed is unknown, defaulting to 1000 [ 99.663567][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.686673][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.703233][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.719400][ T5276] lo speed is unknown, defaulting to 1000 [ 99.787740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.814191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.851840][ T5276] lo speed is unknown, defaulting to 1000 [ 99.856346][ T5276] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.863047][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.863640][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.864516][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.865059][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.878346][ T5124] device veth0_vlan entered promiscuous mode [ 99.895086][ T5124] device veth1_vlan entered promiscuous mode [ 99.923817][ T5276] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.939622][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.943584][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.027632][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.037769][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.048927][ T5282] loop3: detected capacity change from 0 to 32768 [ 100.049825][ T5124] device veth0_macvtap entered promiscuous mode [ 100.083758][ T5276] lo speed is unknown, defaulting to 1000 [ 100.113662][ T5124] device veth1_macvtap entered promiscuous mode [ 100.133666][ T5276] lo speed is unknown, defaulting to 1000 [ 100.166706][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.178188][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.188970][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.203698][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.216178][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.228054][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.238966][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.252155][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.272994][ T5282] JBD2: Ignoring recovery information on journal [ 100.290853][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.308569][ T5276] lo speed is unknown, defaulting to 1000 [ 100.341903][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.376760][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.407894][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.426226][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.439614][ T5282] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 100.480923][ T5276] lo speed is unknown, defaulting to 1000 [ 100.488514][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.515868][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.532357][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.532375][ T26] audit: type=1800 audit(1735349591.823:79): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.315" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 100.547109][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.563381][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.588932][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.606624][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.617192][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.636470][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.701334][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.711906][ T5276] lo speed is unknown, defaulting to 1000 [ 100.714221][ T5124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.727779][ T5124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.736594][ T5124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.745405][ T5124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.756682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.795357][ T5312] ax25_connect(): syz.0.326 uses autobind, please contact jreuter@yaina.de [ 100.797270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.850848][ T5310] [ 100.853221][ T5310] ====================================================== [ 100.860245][ T5310] WARNING: possible circular locking dependency detected [ 100.867265][ T5310] 5.15.175-syzkaller #0 Not tainted [ 100.872558][ T5310] ------------------------------------------------------ [ 100.879579][ T5310] syz.3.315/5310 is trying to acquire lock: [ 100.885478][ T5310] ffff88802c11c098 (&new->rf_sem){+.+.}-{3:3}, at: ocfs2_lock_refcount_tree+0x1fa/0xa60 [ 100.895254][ T5310] [ 100.895254][ T5310] but task is already holding lock: [ 100.902622][ T5310] ffff88806116cda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_truncate_file+0x345/0x14f0 [ 100.913418][ T5310] [ 100.913418][ T5310] which lock already depends on the new lock. [ 100.913418][ T5310] [ 100.923816][ T5310] [ 100.923816][ T5310] the existing dependency chain (in reverse order) is: [ 100.932825][ T5310] [ 100.932825][ T5310] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 100.941691][ T5310] lock_acquire+0x1db/0x4f0 [ 100.946720][ T5310] down_read+0x45/0x2e0 [ 100.951476][ T5310] ocfs2_read_virt_blocks+0x2b3/0xa10 [ 100.957366][ T5310] ocfs2_find_entry+0x437/0x26d0 [ 100.962822][ T5310] ocfs2_find_files_on_disk+0xea/0x310 [ 100.968800][ T5310] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 100.974950][ T5310] ocfs2_get_system_file_inode+0x314/0x7b0 [ 100.981279][ T5310] ocfs2_init_global_system_inodes+0x328/0x720 [ 100.987950][ T5310] ocfs2_fill_super+0x47b3/0x5890 [ 100.993489][ T5310] mount_bdev+0x2c9/0x3f0 [ 100.998336][ T5310] legacy_get_tree+0xeb/0x180 [ 101.003530][ T5310] vfs_get_tree+0x88/0x270 [ 101.008458][ T5310] do_new_mount+0x2ba/0xb40 [ 101.013476][ T5310] __se_sys_mount+0x2d5/0x3c0 [ 101.018666][ T5310] do_syscall_64+0x3b/0xb0 [ 101.023610][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.030026][ T5310] [ 101.030026][ T5310] -> #1 (&osb->system_file_mutex){+.+.}-{3:3}: [ 101.038361][ T5310] lock_acquire+0x1db/0x4f0 [ 101.043377][ T5310] __mutex_lock_common+0x1da/0x25a0 [ 101.049089][ T5310] mutex_lock_nested+0x17/0x20 [ 101.054369][ T5310] ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 101.060702][ T5310] ocfs2_reserve_suballoc_bits+0x16b/0x4c70 [ 101.067113][ T5310] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 101.073956][ T5310] ocfs2_add_refcount_flag+0x48c/0x10f0 [ 101.080015][ T5310] ocfs2_reflink_remap_blocks+0xe53/0x1f20 [ 101.086333][ T5310] ocfs2_remap_file_range+0x5f2/0x8d0 [ 101.092222][ T5310] do_clone_file_range+0x268/0x2d0 [ 101.097884][ T5310] vfs_clone_file_range+0x1fb/0x500 [ 101.103603][ T5310] do_vfs_ioctl+0x1b12/0x2b70 [ 101.108798][ T5310] __se_sys_ioctl+0x81/0x160 [ 101.113901][ T5310] do_syscall_64+0x3b/0xb0 [ 101.118834][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.125246][ T5310] [ 101.125246][ T5310] -> #0 (&new->rf_sem){+.+.}-{3:3}: [ 101.132633][ T5310] validate_chain+0x1649/0x5930 [ 101.138000][ T5310] __lock_acquire+0x1295/0x1ff0 [ 101.143364][ T5310] lock_acquire+0x1db/0x4f0 [ 101.148380][ T5310] down_write+0x38/0x60 [ 101.153053][ T5310] ocfs2_lock_refcount_tree+0x1fa/0xa60 [ 101.159116][ T5310] ocfs2_refcount_cow+0x74e/0x1180 [ 101.164740][ T5310] ocfs2_cow_file_pos+0x3aa/0x4a0 [ 101.170279][ T5310] ocfs2_truncate_file+0x3ad/0x14f0 [ 101.175995][ T5310] ocfs2_setattr+0x16dd/0x1ce0 [ 101.181278][ T5310] notify_change+0xc6d/0xf50 [ 101.186388][ T5310] do_truncate+0x21c/0x300 [ 101.191321][ T5310] vfs_truncate+0x2dd/0x3a0 [ 101.196338][ T5310] do_sys_truncate+0xda/0x190 [ 101.201532][ T5310] do_syscall_64+0x3b/0xb0 [ 101.206462][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.212873][ T5310] [ 101.212873][ T5310] other info that might help us debug this: [ 101.212873][ T5310] [ 101.223214][ T5310] Chain exists of: [ 101.223214][ T5310] &new->rf_sem --> &osb->system_file_mutex --> &ocfs2_file_ip_alloc_sem_key [ 101.223214][ T5310] [ 101.237804][ T5310] Possible unsafe locking scenario: [ 101.237804][ T5310] [ 101.245243][ T5310] CPU0 CPU1 [ 101.250628][ T5310] ---- ---- [ 101.255984][ T5310] lock(&ocfs2_file_ip_alloc_sem_key); [ 101.261523][ T5310] lock(&osb->system_file_mutex); [ 101.269146][ T5310] lock(&ocfs2_file_ip_alloc_sem_key); [ 101.277211][ T5310] lock(&new->rf_sem); [ 101.281360][ T5310] [ 101.281360][ T5310] *** DEADLOCK *** [ 101.281360][ T5310] [ 101.289490][ T5310] 3 locks held by syz.3.315/5310: [ 101.294501][ T5310] #0: ffff88805d23a460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 101.303736][ T5310] #1: ffff88806116d108 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 101.314174][ T5310] #2: ffff88806116cda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_truncate_file+0x345/0x14f0 [ 101.325416][ T5310] [ 101.325416][ T5310] stack backtrace: [ 101.331378][ T5310] CPU: 0 PID: 5310 Comm: syz.3.315 Not tainted 5.15.175-syzkaller #0 [ 101.339434][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.349481][ T5310] Call Trace: [ 101.352769][ T5310] [ 101.355698][ T5310] dump_stack_lvl+0x1e3/0x2d0 [ 101.360373][ T5310] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 101.366003][ T5310] ? print_circular_bug+0x12b/0x1a0 [ 101.371198][ T5310] check_noncircular+0x2f8/0x3b0 [ 101.376131][ T5310] ? add_chain_block+0x850/0x850 [ 101.381064][ T5310] ? lockdep_lock+0x11f/0x2a0 [ 101.385742][ T5310] validate_chain+0x1649/0x5930 [ 101.390596][ T5310] ? __lock_acquire+0x1295/0x1ff0 [ 101.395615][ T5310] ? reacquire_held_locks+0x660/0x660 [ 101.400985][ T5310] ? mark_lock+0x98/0x340 [ 101.405310][ T5310] ? __lock_acquire+0x1295/0x1ff0 [ 101.410330][ T5310] ? mark_lock+0x98/0x340 [ 101.414658][ T5310] ? __lock_acquire+0x1295/0x1ff0 [ 101.419678][ T5310] ? mark_lock+0x98/0x340 [ 101.424008][ T5310] __lock_acquire+0x1295/0x1ff0 [ 101.428860][ T5310] lock_acquire+0x1db/0x4f0 [ 101.433360][ T5310] ? ocfs2_lock_refcount_tree+0x1fa/0xa60 [ 101.439077][ T5310] ? read_lock_is_recursive+0x10/0x10 [ 101.444448][ T5310] ? __might_sleep+0xc0/0xc0 [ 101.449032][ T5310] ? _raw_spin_unlock+0x24/0x40 [ 101.453886][ T5310] ? ocfs2_refcount_lock+0x17e/0x290 [ 101.459168][ T5310] ? ocfs2_refcount_cow+0x6f9/0x1180 [ 101.464446][ T5310] ? ocfs2_cow_file_pos+0x3aa/0x4a0 [ 101.469642][ T5310] ? ocfs2_truncate_file+0x3ad/0x14f0 [ 101.475013][ T5310] ? ocfs2_qinfo_lock+0xec0/0xec0 [ 101.480037][ T5310] ? do_sys_truncate+0xda/0x190 [ 101.484893][ T5310] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.490967][ T5310] down_write+0x38/0x60 [ 101.495132][ T5310] ? ocfs2_lock_refcount_tree+0x1fa/0xa60 [ 101.500931][ T5310] ocfs2_lock_refcount_tree+0x1fa/0xa60 [ 101.506486][ T5310] ? inode_inc_iversion+0x90/0x90 [ 101.511516][ T5310] ? ocfs2_refcount_cow+0x6f9/0x1180 [ 101.516814][ T5310] ocfs2_refcount_cow+0x74e/0x1180 [ 101.521929][ T5310] ? ocfs2_cow_sync_writeback+0x8c0/0x8c0 [ 101.527646][ T5310] ? ocfs2_get_clusters+0x33d/0xbc0 [ 101.532873][ T5310] ? __lock_acquire+0x1295/0x1ff0 [ 101.537918][ T5310] ? ocfs2_xattr_get_clusters+0x9c0/0x9c0 [ 101.543653][ T5310] ocfs2_cow_file_pos+0x3aa/0x4a0 [ 101.548676][ T5310] ? ocfs2_remove_inode_range+0x2960/0x2960 [ 101.554661][ T5310] ? do_raw_spin_unlock+0x137/0x8b0 [ 101.559860][ T5310] ? ocfs2_resv_discard+0xa2/0x230 [ 101.564968][ T5310] ocfs2_truncate_file+0x3ad/0x14f0 [ 101.570161][ T5310] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 101.575880][ T5310] ? ocfs2_simple_size_update+0x4d0/0x4d0 [ 101.581598][ T5310] ? do_raw_spin_unlock+0x137/0x8b0 [ 101.586798][ T5310] ? memset+0x1f/0x40 [ 101.590776][ T5310] ? _raw_spin_unlock+0x24/0x40 [ 101.595630][ T5310] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 101.601353][ T5310] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 101.606900][ T5310] ? ocfs2_rw_lock+0x13a/0x250 [ 101.611674][ T5310] ? ocfs2_create_new_inode_locks+0x6d0/0x6d0 [ 101.617742][ T5310] ? jbd2_journal_begin_ordered_truncate+0xbc/0x150 [ 101.624336][ T5310] ocfs2_setattr+0x16dd/0x1ce0 [ 101.629113][ T5310] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 101.634923][ T5310] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 101.641163][ T5310] ? rwsem_down_write_slowpath+0x117d/0x16a0 [ 101.647149][ T5310] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 101.653041][ T5310] ? current_time+0x1ba/0x300 [ 101.657716][ T5310] ? atime_needs_update+0x7b0/0x7b0 [ 101.662912][ T5310] ? evm_inode_setattr+0xf7/0x5b0 [ 101.667935][ T5310] ? rwsem_write_trylock+0x166/0x210 [ 101.673217][ T5310] ? bpf_lsm_inode_setattr+0x5/0x10 [ 101.678424][ T5310] ? security_inode_setattr+0xce/0x120 [ 101.683905][ T5310] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 101.689727][ T5310] notify_change+0xc6d/0xf50 [ 101.694325][ T5310] do_truncate+0x21c/0x300 [ 101.698742][ T5310] ? rcu_lock_release+0x20/0x20 [ 101.703593][ T5310] ? HAS_UNMAPPED_ID+0x1ef/0x240 [ 101.708534][ T5310] ? bpf_lsm_path_truncate+0x5/0x10 [ 101.713731][ T5310] vfs_truncate+0x2dd/0x3a0 [ 101.718236][ T5310] do_sys_truncate+0xda/0x190 [ 101.722909][ T5310] ? break_lease+0xd0/0xd0 [ 101.727323][ T5310] ? syscall_enter_from_user_mode+0x2e/0x240 [ 101.733302][ T5310] ? lockdep_hardirqs_on+0x94/0x130 [ 101.738508][ T5310] ? syscall_enter_from_user_mode+0x2e/0x240 [ 101.744500][ T5310] do_syscall_64+0x3b/0xb0 [ 101.749267][ T5310] ? clear_bhb_loop+0x15/0x70 [ 101.754035][ T5310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.759933][ T5310] RIP: 0033:0x7f626dd7ed29 [ 101.764462][ T5310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.784073][ T5310] RSP: 002b:00007f626bbad038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 101.792490][ T5310] RAX: ffffffffffffffda RBX: 00007f626df6f160 RCX: 00007f626dd7ed29 [ 101.800461][ T5310] RDX: 0000000000000000 RSI: 00000000000067f9 RDI: 0000000020000100 [ 101.808436][ T5310] RBP: 00007f626ddfab08 R08: 0000000000000000 R09: 0000000000000000 [ 101.816408][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.824387][ T5310] R13: 0000000000000000 R14: 00007f626df6f160 R15: 00007ffdd0287038 [ 101.832369][ T5310] [ 101.835406][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.848669][ T4591] Bluetooth: hci4: command 0x0419 tx timeout [ 101.943520][ T5124] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 101.979364][ T5282] syz.3.315 (5282) used greatest stack depth: 18464 bytes left [ 102.014924][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.024242][ T5124] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 102.028589][ T4172] ocfs2: Unmounting device (7,3) on (node local) [ 102.042476][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.073289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.140404][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.148273][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.179090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.968359][ C1] Unknown status report in ack skb