last executing test programs: 13.561626496s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x11, r1, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000280)=ANY=[], 0xe6da) 13.366694434s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 13.302609094s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2c8, &(0x7f0000002500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 12.685639786s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) getsockname$inet6(r0, 0x0, &(0x7f00000000c0)) 12.288091725s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000048aa006385000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 11.338491846s ago: executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b38090987f70e06d038e7ff7fc6e5539b5064078b089b0e082363090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b39300d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f097cbbaba8f1cefdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c0ad21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edd0f3349832386469a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a09d367e5f84c96ec664b72934b4905109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffed6}}, 0x1006) write$UHID_INPUT(r0, &(0x7f0000002800)={0xc, {"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", 0x1000}}, 0x1006) 10.050878517s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.938461134s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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") syz_open_procfs$namespace(0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = dup(r1) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 9.669408834s ago: executing program 4: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) 8.461424233s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c6e6f636173652c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e8b5f786c2174653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x8000002}}) 8.196465582s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC, @NLBL_CIPSOV4_A_MLSLVLLOC={0xffffff61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xff47}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xd0}}, 0x0) 5.870433058s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$eJzs289rHFUcAPDv7CataVMTS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpFcWj2tzO5MsrvZTbPpJlvdzwcmeW/mLe99d+btvjdvJ4CeNZr+SSIGI+L3iBiqZusLjFb/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvzTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmR0s4NPlssdrq67DtSkk74uNoS2FKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNRm/Y2LJBvHP4Xr2wpsi9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96Tsejfm+YnN6njh1d++6LVsdrxX7ql9edjwawd1/v21r9mdnpp+k5irnXjk4iRvmbxJ2srAUlEHI6IkW3WMf/0N0dbHbt9/JvowDpT+euIp6rnfyUa4s8lm69PTtwTpbnjE/lVsdEvv159s1X9dxR/B6Tnf1/T638t/uGkdr12sf06rv7xecs5zXav/z3J23X7PpxeWro0GbEneb3a6Nr9Uw3lptbLp/GPHWve/w/G+jtxJCLSi/jhiHgkIh7N2v5YRDweEcc2if+nl594r27H2GAb8e+sNP7Zts7/emJPNO5pniie//G7ukqHo4340/N/spIay/Zs5fNvK+3a3tUMAAAA/z2FiBiMpDC+li4Uxserv+E/FPsKpYXFpWfOLnxwcbb6jMBw9BfyO11DNfdDJ7NpfZ6fasifyO4bf1kcqOTHZxZKs90OHnrc/hb9P/VnsdutA3ac57Wgd+n/0Lv0f+hd+j/0rib9f6Ab7QB2X7Pv/4+70A5g9zX0f8t+0EPM/6F36f/Qu/R/6EmLA3H7h+QlJDYkonBXNENihxLd/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojH8DAAD//ygv5wk=") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000880)=ANY=[], 0x386, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000740), 0x24, 0x0) 5.869837778s ago: executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x21, 0x0) 5.371777812s ago: executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x0, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000540)=ANY=[], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r9, 0x7ffffb, 0x0) write$binfmt_elf64(r9, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(r8, r8, 0x0, 0x100000000) write$binfmt_script(r7, &(0x7f0000000280), 0x4) copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xffffffffa003e45c, 0x700000000000000) 4.219139843s ago: executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80001) write$sndseq(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) 3.945987233s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0) syz_usb_disconnect(r0) r1 = socket$packet(0x11, 0x3, 0x300) close_range(r1, 0xffffffffffffffff, 0x0) 1.336802311s ago: executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x80000011, 0x0, 0x0, 0x0, "0ea4fc7b9ff53acfc3b072570d9763d021c778"}) 775.417994ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140001d0000080002"], 0x80}}, 0x0) 698.014275ms ago: executing program 2: r0 = fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) socket$netlink(0x10, 0x3, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 660.079591ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) 619.531667ms ago: executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000c}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 596.185881ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x15}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 539.154239ms ago: executing program 2: syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzsz8FRwzAUBNCVZRt8ghIog0aoB9wOLXDklkqSHjKjjB07JSQ5vHfR7I6kPz881FSS1P6z7MX7y/Vci5rXYUqX5P/v0JefZGzfaW25M2wP5tOQtLeauuUkXTm2Oi7p3OaW/ce1+biNSv36vdOaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDULgEAAP//cloQdQ==") 447.827343ms ago: executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = dup(r0) write$cgroup_pid(r1, 0x0, 0x0) 377.092173ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 302.542434ms ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 216.013017ms ago: executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 144.979498ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x4, &(0x7f00000001c0), 0x4) 109.661243ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{}, {}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) 0s ago: executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x37, &(0x7f0000000280)={0x77359400}) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) kernel console output (not intermixed with test programs): : Failed to read block 0x0: -5 [ 172.955821][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 172.963241][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 172.970143][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 172.976465][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 172.983857][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 172.990782][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 172.997132][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.004568][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.011378][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.017945][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.025519][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.032359][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.038657][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.046175][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.052985][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.059249][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.066586][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.073414][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.079658][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.086979][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.093796][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.100053][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.107375][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.114355][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.120619][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.128046][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.134952][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.141184][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.148661][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.155533][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.161762][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.169293][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.176747][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.183019][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.190485][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.197416][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.203643][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.211004][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.217846][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.224081][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.231430][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.238378][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.244658][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.253038][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.259900][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.267299][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.274664][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.281473][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.287790][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.295134][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.301970][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.308246][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.315749][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.322582][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.328879][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.336277][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.343093][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.351065][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.358434][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.365304][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.371549][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.378937][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.385845][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.392072][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.399412][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.406297][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.412516][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.419870][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.427254][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.433583][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.440957][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.447818][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.454063][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.461397][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.468333][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.474649][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.481945][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.488821][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.495094][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.502418][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.509841][ T6114] SQUASHFS error: Failed to read block 0x0: -5 [ 173.516140][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.523475][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.530375][ T6114] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 173.537729][ T6114] SQUASHFS error: read_indexes: reading block [6e4:0] [ 173.720167][ T6138] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.314656][ T6164] loop0: detected capacity change from 0 to 512 [ 174.509850][ T6164] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 174.607888][ T6164] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: casefold flag without casefold feature [ 174.715022][ T6164] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: ea_inode with extended attributes [ 174.812029][ T6164] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117 [ 174.866455][ T6164] EXT4-fs (loop0): 1 orphan inode deleted [ 174.872514][ T6164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.901935][ T6187] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 175.146652][ T3576] EXT4-fs (loop0): unmounting filesystem. [ 175.164743][ T6200] 9pnet_rdma: rdma_create_trans (6200): problem binding to privport: 13 [ 175.625980][ T6219] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.027147][ T3587] Bluetooth: hci2: command 0x0406 tx timeout [ 176.569661][ T6212] loop0: detected capacity change from 0 to 32768 [ 176.670077][ T6212] jfs_rename did not expect dtDelete to return rc = -2 [ 176.689550][ T6212] ERROR: (device loop0): jfs_rename: [ 176.689550][ T6212] [ 176.721850][ T6250] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.591663][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.639768][ T6267] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 177.685962][ T6267] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.695645][ T6267] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.704364][ T6267] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.713195][ T6267] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.752477][ T6267] device vxlan0 entered promiscuous mode [ 177.811301][ T4762] device hsr_slave_0 left promiscuous mode [ 177.827420][ T4762] device hsr_slave_1 left promiscuous mode [ 177.856850][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.880446][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.909392][ T4762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.927982][ T4762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.956203][ T4762] device bridge_slave_1 left promiscuous mode [ 177.977755][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.001724][ T4762] device bridge_slave_0 left promiscuous mode [ 178.017820][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.061844][ T4762] device veth1_macvtap left promiscuous mode [ 178.084856][ T4762] device veth0_macvtap left promiscuous mode [ 178.091053][ T4762] device veth1_vlan left promiscuous mode [ 178.109496][ T4762] device veth0_vlan left promiscuous mode [ 178.426340][ T4762] team0 (unregistering): Port device team_slave_1 removed [ 178.443379][ T26] audit: type=1326 audit(1718528441.102:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x0 [ 178.446392][ T6284] loop3: detected capacity change from 0 to 32768 [ 178.483500][ T4762] team0 (unregistering): Port device team_slave_0 removed [ 178.501656][ T4762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.522208][ T4762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.645860][ T4762] bond0 (unregistering): Released all slaves [ 179.568265][ T6309] 9pnet_rdma: rdma_create_trans (6309): problem binding to privport: 13 [ 179.615656][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.673753][ T6319] loop3: detected capacity change from 0 to 512 [ 179.873618][ T6319] EXT4-fs (loop3): Test dummy encryption mode enabled [ 179.923818][ T6319] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 1: comm syz-executor.3: invalid block [ 179.990470][ T6319] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 180.059729][ T6319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.330465][ T6310] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 180.503839][ T6319] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 180.678997][ T4064] EXT4-fs (loop3): unmounting filesystem. [ 181.032768][ T6382] syz-executor.2[6382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.032873][ T6382] syz-executor.2[6382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.054775][ T6382] syz-executor.2[6382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.084040][ T6382] syz-executor.2[6382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.367364][ T6411] syz-executor.4[6411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.412051][ T6411] syz-executor.4[6411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.473679][ T6411] syz-executor.4[6411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.523239][ T6377] loop0: detected capacity change from 0 to 32768 [ 182.542518][ T6377] XFS: attr2 mount option is deprecated. [ 182.548319][ T6377] XFS: ikeep mount option is deprecated. [ 182.553274][ T6411] syz-executor.4[6411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.553994][ T6377] XFS: noikeep mount option is deprecated. [ 182.950463][ T6377] XFS (loop0): Mounting V5 Filesystem [ 183.404699][ T6377] XFS (loop0): Ending clean mount [ 183.433700][ T6377] XFS (loop0): Quotacheck needed: Please wait. [ 183.492480][ T6434] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 183.516527][ T6377] XFS (loop0): Quotacheck: Done. [ 183.594704][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.638119][ T6434] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.739452][ T3576] XFS (loop0): Unmounting Filesystem [ 184.810787][ T6453] syz-executor.1[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.810893][ T6453] syz-executor.1[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.961288][ T6463] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 185.100778][ T6437] loop3: detected capacity change from 0 to 32768 [ 185.135139][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.164974][ T6470] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 185.189253][ T6437] jfs_rename did not expect dtDelete to return rc = -2 [ 185.230349][ T6437] ERROR: (device loop3): jfs_rename: [ 185.230349][ T6437] [ 185.242254][ T6470] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.251241][ T6470] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.260138][ T6470] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.268981][ T6470] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.281784][ T6470] device vxlan0 entered promiscuous mode [ 186.649741][ T6500] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 186.753449][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.780537][ T6505] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 186.831690][ T6505] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.840658][ T6505] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.849444][ T6505] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.858230][ T6505] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.877167][ T6505] device vxlan0 entered promiscuous mode [ 186.943570][ T6485] loop4: detected capacity change from 0 to 32768 [ 186.996623][ T6485] Dev loop4 SGI disklabel: csum bad, label corrupted [ 187.305213][ T6504] loop3: detected capacity change from 0 to 32768 [ 187.340887][ T6504] XFS: attr2 mount option is deprecated. [ 187.348225][ T6504] XFS: ikeep mount option is deprecated. [ 187.361483][ T6524] loop0: detected capacity change from 0 to 512 [ 187.363774][ T6504] XFS: noikeep mount option is deprecated. [ 187.393943][ T6524] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 187.415743][ T6524] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 187.425705][ T6504] XFS (loop3): Mounting V5 Filesystem [ 187.428465][ T6524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006] [ 187.439444][ T6524] System zones: 0-2, 18-18, 34-35 [ 187.451252][ T6524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.530446][ T6540] tmpfs: Bad value for 'mpol' [ 187.531374][ T3576] EXT4-fs (loop0): unmounting filesystem. [ 187.552472][ T6504] XFS (loop3): Ending clean mount [ 187.564318][ T6504] XFS (loop3): Quotacheck needed: Please wait. [ 187.605383][ T6504] XFS (loop3): Quotacheck: Done. [ 187.749443][ T4064] XFS (loop3): Unmounting Filesystem [ 187.849730][ T6557] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 187.858550][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.943034][ T6561] loop4: detected capacity change from 0 to 512 [ 187.995722][ T6561] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 188.032315][ T6561] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 188.081245][ T6561] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006] [ 188.089942][ T6561] System zones: 0-2, 18-18, 34-35 [ 188.096452][ T6561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.138933][ T5345] EXT4-fs (loop4): unmounting filesystem. [ 188.206850][ T6570] tmpfs: Bad value for 'mpol' [ 188.252881][ T6572] loop4: detected capacity change from 0 to 256 [ 188.289485][ T6572] exfat: Deprecated parameter 'utf8' [ 188.321720][ T6572] exfat: Deprecated parameter 'namecase' [ 188.341683][ T6572] exfat: Deprecated parameter 'utf8' [ 188.348714][ T6581] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.372775][ T6572] exfat: Deprecated parameter 'namecase' [ 188.404886][ T6572] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 189.153565][ T6588] loop0: detected capacity change from 0 to 164 [ 189.537033][ T26] audit: type=1326 audit(1718528452.180:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.559921][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.603719][ T26] audit: type=1326 audit(1718528452.180:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.626645][ T26] audit: type=1326 audit(1718528452.180:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.659619][ T26] audit: type=1326 audit(1718528452.180:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.729283][ T26] audit: type=1326 audit(1718528452.180:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.753178][ T26] audit: type=1326 audit(1718528452.180:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.776836][ T26] audit: type=1326 audit(1718528452.180:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.799827][ T26] audit: type=1326 audit(1718528452.180:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.878716][ T26] audit: type=1326 audit(1718528452.180:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.933288][ T6605] tmpfs: Bad value for 'mpol' [ 189.957048][ T26] audit: type=1326 audit(1718528452.180:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b63a7cea9 code=0x7ffc0000 [ 189.969459][ T6604] loop4: detected capacity change from 0 to 1024 [ 190.017955][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.065251][ T6604] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.099591][ T6604] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.123105][ T6604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.361778][ T6626] overlayfs: failed to clone upperpath [ 191.282180][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.341373][ T6636] loop3: detected capacity change from 0 to 512 [ 191.376758][ T6641] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 191.440712][ T6636] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.504707][ T6636] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 1: comm syz-executor.3: invalid block [ 191.540124][ T6636] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 191.573359][ T6636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.881975][ T6655] tmpfs: Bad value for 'mpol' [ 191.884244][ T6636] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 192.160626][ T6620] loop0: detected capacity change from 0 to 164 [ 192.433390][ T4064] EXT4-fs (loop3): unmounting filesystem. [ 193.960874][ T6678] loop3: detected capacity change from 0 to 2048 [ 194.035310][ T6681] overlayfs: failed to clone upperpath [ 194.187659][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.207833][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.790127][ T6678] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.924921][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.222958][ T6697] tmpfs: Bad value for 'mpol' [ 195.608457][ T5345] EXT4-fs (loop4): unmounting filesystem. [ 196.920500][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 196.920516][ T26] audit: type=1800 audit(1718528459.579:242): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 197.272332][ T6748] loop4: detected capacity change from 0 to 4096 [ 197.309851][ T6748] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 197.387738][ T6707] loop3: detected capacity change from 0 to 40427 [ 197.488486][ T6707] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 197.529175][ T6707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 198.311602][ T6772] binder: 6761:6772 ioctl 4018620d 0 returned -22 [ 199.103496][ T6707] F2FS-fs (loop3): invalid crc value [ 199.138654][ T6707] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 199.188644][ T26] audit: type=1800 audit(1718528461.819:243): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 199.590465][ T6781] loop0: detected capacity change from 0 to 8192 [ 199.607331][ T6787] loop4: detected capacity change from 0 to 16 [ 199.630674][ T6781] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.643901][ T6781] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 199.653844][ T6781] REISERFS (device loop0): using ordered data mode [ 199.660557][ T6781] reiserfs: using flush barriers [ 199.675339][ T6781] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.693273][ T6787] erofs: (device loop4): mounted with root inode @ nid 36. [ 199.697956][ T6781] REISERFS (device loop0): checking transaction log (loop0) [ 199.709344][ T3584] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 199.738863][ T6787] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 199.755573][ T6781] REISERFS (device loop0): Using r5 hash to sort names [ 199.780884][ T6781] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 199.820630][ T6781] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 199.830242][ T26] audit: type=1800 audit(1718528462.489:244): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 200.002015][ T6787] syz-executor.4 (6787) used greatest stack depth: 19456 bytes left [ 200.404178][ T6815] loop0: detected capacity change from 0 to 1024 [ 200.425184][ T6815] EXT4-fs: Ignoring removed orlov option [ 200.436157][ T6815] ext4: Unknown parameter 'uid>00000000000000000000' [ 200.493247][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.565598][ T6819] loop4: detected capacity change from 0 to 512 [ 200.597344][ T6819] EXT4-fs (loop4): Test dummy encryption mode enabled [ 200.711781][ T6819] EXT4-fs error (device loop4): __ext4_iget:5044: inode #11: block 1: comm syz-executor.4: invalid block [ 200.736604][ T6819] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 200.763809][ T6819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.502672][ T26] audit: type=1800 audit(1718528464.159:245): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1974 res=0 errno=0 [ 201.693010][ T26] audit: type=1326 audit(1718528464.339:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 201.747130][ T26] audit: type=1326 audit(1718528464.349:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 201.815056][ T26] audit: type=1326 audit(1718528464.379:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 201.867790][ T26] audit: type=1326 audit(1718528464.379:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 201.918190][ T26] audit: type=1326 audit(1718528464.379:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 201.956915][ T6804] loop3: detected capacity change from 0 to 40427 [ 201.967837][ T26] audit: type=1326 audit(1718528464.379:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 201.985037][ T6804] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 202.032369][ T6804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 202.037748][ T26] audit: type=1326 audit(1718528464.389:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 202.074171][ T6804] F2FS-fs (loop3): invalid crc value [ 202.106548][ T26] audit: type=1326 audit(1718528464.389:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51f407a627 code=0x7ffc0000 [ 202.108864][ T6804] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 202.177751][ T26] audit: type=1326 audit(1718528464.389:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51f4040309 code=0x7ffc0000 [ 202.208128][ T26] audit: type=1326 audit(1718528464.389:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51f407cea9 code=0x7ffc0000 [ 202.212673][ T5345] EXT4-fs (loop4): unmounting filesystem. [ 202.230978][ T6804] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 202.233712][ T6845] loop0: detected capacity change from 0 to 1024 [ 202.261075][ T26] audit: type=1326 audit(1718528464.389:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51f407a627 code=0x7ffc0000 [ 202.291484][ T6845] EXT4-fs: Ignoring removed oldalloc option [ 202.318879][ T26] audit: type=1326 audit(1718528464.389:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51f4040309 code=0x7ffc0000 [ 202.358002][ T6845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.389699][ T26] audit: type=1326 audit(1718528464.389:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51f407a627 code=0x7ffc0000 [ 202.433341][ T26] audit: type=1326 audit(1718528464.389:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51f4040309 code=0x7ffc0000 [ 202.446483][ T6845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.487323][ T26] audit: type=1326 audit(1718528464.389:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51f407a627 code=0x7ffc0000 [ 202.554332][ T6854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.650591][ T3576] EXT4-fs (loop0): unmounting filesystem. [ 202.697485][ T6857] device ipvlan2 entered promiscuous mode [ 203.199441][ T6879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.454114][ T6893] device ipvlan2 entered promiscuous mode [ 203.612100][ T6907] loop4: detected capacity change from 0 to 256 [ 203.647398][ T6907] exfat: Deprecated parameter 'utf8' [ 203.702923][ T6907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 203.800438][ T6915] loop0: detected capacity change from 0 to 2048 [ 203.834703][ T6915] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 203.875837][ T6915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.003085][ T6926] loop4: detected capacity change from 0 to 64 [ 204.060831][ T4571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.085448][ T4571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.228740][ T6926] MINIX-fs: bad superblock or unable to read bitmaps [ 204.300544][ T4571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.477030][ T4571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.862671][ T4571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.908362][ T4571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.024232][ T4571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.065624][ T4571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.401267][ T3587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.414405][ T3587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.432612][ T3587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.448432][ T3587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.455984][ T3587] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.463320][ T3587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.711891][ T6934] loop3: detected capacity change from 0 to 32768 [ 205.774735][ T6934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6934) [ 205.893170][ T6934] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.948396][ T6934] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 205.999576][ T6934] BTRFS info (device loop3): using free space tree [ 206.019861][ T6953] chnl_net:caif_netlink_parms(): no params data found [ 206.231761][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.239142][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.250142][ T6953] device bridge_slave_0 entered promiscuous mode [ 206.286939][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.319985][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.343949][ T6953] device bridge_slave_1 entered promiscuous mode [ 206.385183][ T6934] BTRFS info (device loop3): enabling ssd optimizations [ 206.573690][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.643089][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.649963][ T4064] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.906414][ T6953] team0: Port device team_slave_0 added [ 207.000218][ T6953] team0: Port device team_slave_1 added [ 207.029970][ T4571] device hsr_slave_0 left promiscuous mode [ 207.045917][ T4571] device hsr_slave_1 left promiscuous mode [ 207.065407][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.090179][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.154581][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.185669][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.207966][ T6996] loop3: detected capacity change from 0 to 256 [ 207.218535][ T4571] device bridge_slave_1 left promiscuous mode [ 207.233031][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.257618][ T4571] device bridge_slave_0 left promiscuous mode [ 207.261973][ T6996] exfat: Deprecated parameter 'utf8' [ 207.270718][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.302341][ T4571] device veth1_macvtap left promiscuous mode [ 207.314944][ T4571] device veth0_macvtap left promiscuous mode [ 207.322449][ T4571] device veth1_vlan left promiscuous mode [ 207.328418][ T4571] device veth0_vlan left promiscuous mode [ 207.336923][ T6996] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 207.504262][ T7003] loop4: detected capacity change from 0 to 1024 [ 207.508685][ T3584] Bluetooth: hci4: command tx timeout [ 207.528413][ T7003] EXT4-fs: Ignoring removed orlov option [ 207.538421][ T7003] ext4: Unknown parameter 'uid>00000000000000000000' [ 208.042027][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 208.088822][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 208.137335][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.182851][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.376074][ T4571] bond0 (unregistering): Released all slaves [ 208.520378][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.527516][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.585979][ T7007] loop3: detected capacity change from 0 to 40427 [ 208.597373][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.641748][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.644341][ T7007] F2FS-fs (loop3): invalid crc value [ 208.672309][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.707253][ T7007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.738149][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.847051][ T6953] device hsr_slave_0 entered promiscuous mode [ 208.864898][ T6953] device hsr_slave_1 entered promiscuous mode [ 208.898263][ T7007] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 208.954283][ T7007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.684610][ T3584] Bluetooth: hci4: command tx timeout [ 209.835850][ T7007] syz-executor.3: attempt to access beyond end of device [ 209.835850][ T7007] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.075083][ T4064] syz-executor.3: attempt to access beyond end of device [ 210.075083][ T4064] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 210.099420][ T4064] syz-executor.3: attempt to access beyond end of device [ 210.099420][ T4064] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 210.595034][ T6953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.626333][ T7031] loop4: detected capacity change from 0 to 32768 [ 210.642363][ T6953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.664870][ T7031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7031) [ 210.671513][ T6953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.698795][ T7031] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.715528][ T6953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.734977][ T7031] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 210.774292][ T7031] BTRFS info (device loop4): using free space tree [ 210.998262][ T7031] BTRFS info (device loop4): enabling ssd optimizations [ 211.051123][ T7031] fs-verity: sha512 using implementation "sha512-avx2" [ 211.104979][ T6953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.110302][ T7031] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 211.174534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.200093][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.243801][ T6953] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.279859][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.290305][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.298742][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.305863][ T5016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.342998][ T5345] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.423251][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.440794][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.459512][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.468030][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.475151][ T5018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.509328][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.530977][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.572194][ T7064] batman_adv: batadv0: Adding interface: vlan3 [ 211.578570][ T7064] batman_adv: batadv0: The MTU of interface vlan3 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.649156][ T7064] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 211.726131][ T6953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.749124][ T3584] Bluetooth: hci4: command tx timeout [ 211.768870][ T6953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.825184][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.840568][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.849251][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.859594][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.868106][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.876774][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.885394][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.894448][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.904243][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.912413][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.938562][ T3587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.959149][ T3587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.967579][ T3578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.977702][ T7079] loop4: detected capacity change from 0 to 2048 [ 212.987449][ T3587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.995578][ T3578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.998406][ T7079] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 213.012832][ T3578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.139484][ T7087] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.153086][ T7079] syz-executor.4: attempt to access beyond end of device [ 213.153086][ T7079] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 213.516137][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 213.694570][ T6953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.730969][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.745435][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.814644][ T7099] loop4: detected capacity change from 0 to 2048 [ 213.829360][ T3584] Bluetooth: hci4: command tx timeout [ 213.845706][ T7099] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.874106][ T7099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.900565][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.936102][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.117264][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.156130][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.183935][ T7080] device bridge_slave_0 entered promiscuous mode [ 214.480458][ T6953] device veth0_vlan entered promiscuous mode [ 214.760099][ T6953] device veth1_vlan entered promiscuous mode [ 214.893100][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.910918][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.919074][ T7080] device bridge_slave_1 entered promiscuous mode [ 214.974444][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.988910][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.003131][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.020461][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.039016][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.057104][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.076137][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.085411][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.101418][ T6953] device veth0_macvtap entered promiscuous mode [ 215.109580][ T3584] Bluetooth: hci1: command tx timeout [ 215.166995][ T6953] device veth1_macvtap entered promiscuous mode [ 215.235425][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.267432][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.282605][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.315395][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.349778][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.379416][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.409391][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.429845][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.450746][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.471571][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.490850][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.547150][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.570376][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.590986][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.618795][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.636823][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.647855][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.665005][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.676612][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.693362][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.704462][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.721845][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.736400][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.753742][ T7080] team0: Port device team_slave_0 added [ 215.775462][ T7080] team0: Port device team_slave_1 added [ 215.791994][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.808729][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.820796][ T6953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.837505][ T6953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.851372][ T6953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.866957][ T6953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.932989][ T7134] device dummy0 entered promiscuous mode [ 215.998274][ T4571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.039093][ T7130] device dummy0 left promiscuous mode [ 216.060060][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.067038][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.149761][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.183022][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.199562][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.269976][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.314555][ T4571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.438772][ T4571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.509222][ T7080] device hsr_slave_0 entered promiscuous mode [ 216.530357][ T7080] device hsr_slave_1 entered promiscuous mode [ 216.549882][ T7080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.567776][ T7080] Cannot create hsr debugfs directory [ 216.633724][ T4571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.695403][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.715064][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.756111][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.774483][ T7145] loop4: detected capacity change from 0 to 256 [ 216.857205][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.869865][ T7145] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 216.878070][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.926450][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.060501][ T7147] loop1: detected capacity change from 0 to 128 [ 217.077762][ T7147] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 217.143002][ T7147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.190673][ T3584] Bluetooth: hci1: command tx timeout [ 217.436938][ T7158] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 217.458996][ T7158] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.634143][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 217.721870][ T7167] Process accounting resumed [ 217.915636][ T7172] loop4: detected capacity change from 0 to 256 [ 217.979429][ T7172] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 218.273433][ T7080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.289922][ T7080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.322758][ T7080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.345262][ T7080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.509812][ T5018] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 218.525408][ T4571] device hsr_slave_0 left promiscuous mode [ 218.550289][ T4571] device hsr_slave_1 left promiscuous mode [ 218.561506][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.576778][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.596547][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.604120][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.614051][ T4571] device bridge_slave_1 left promiscuous mode [ 218.627696][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.637894][ T4571] device bridge_slave_0 left promiscuous mode [ 218.653285][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.672645][ T4571] device veth1_macvtap left promiscuous mode [ 218.679022][ T4571] device veth0_macvtap left promiscuous mode [ 218.689540][ T4571] device veth1_vlan left promiscuous mode [ 218.698374][ T4571] device veth0_vlan left promiscuous mode [ 218.780095][ T5018] usb 5-1: Using ep0 maxpacket: 16 [ 218.910059][ T5018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.928767][ T5018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.938843][ T5018] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.960762][ T5018] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.975463][ T5018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.987284][ T5018] usb 5-1: config 0 descriptor?? [ 219.105787][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 219.127669][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 219.148479][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.168462][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.270100][ T3584] Bluetooth: hci1: command tx timeout [ 219.310466][ T7198] loop4: detected capacity change from 0 to 1024 [ 219.326503][ T4571] bond0 (unregistering): Released all slaves [ 219.376815][ T7200] cgroup: fork rejected by pids controller in /syz1 [ 219.419498][ T7198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 219.429096][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.438673][ T7198] xt_socket: unknown flags 0x2 [ 219.490902][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.503072][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.511792][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.519488][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.522514][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.620022][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.628746][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.650713][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.657846][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.680264][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.689059][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.720554][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.727682][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.750978][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.769922][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.778796][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.812114][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.855231][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.877658][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.924513][ T7080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.940333][ T5018] usbhid 5-1:0.0: can't add hid device: -71 [ 219.946336][ T5018] usbhid: probe of 5-1:0.0 failed with error -71 [ 219.959961][ T7080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.985050][ T5018] usb 5-1: USB disconnect, device number 2 [ 219.992457][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.001032][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.021900][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.040888][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.056999][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.067526][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.083044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.124890][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.378377][ T5345] EXT4-fs (loop4): unmounting filesystem. [ 220.590419][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.607971][ T7231] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 220.608147][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.650366][ T7231] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.654273][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.722112][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.751725][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.768117][ T3578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.779389][ T3578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.788771][ T3578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.796641][ T3578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.804303][ T3578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.812330][ T3578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.817452][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.847773][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.908722][ T7080] device veth0_vlan entered promiscuous mode [ 220.995557][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.010756][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.023408][ T7080] device veth1_vlan entered promiscuous mode [ 221.141059][ T7080] device veth0_macvtap entered promiscuous mode [ 221.176800][ T7080] device veth1_macvtap entered promiscuous mode [ 221.199030][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.216085][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.236059][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.265890][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.284228][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.346817][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.360560][ T3584] Bluetooth: hci1: command tx timeout [ 221.368070][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.399635][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.415765][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.470149][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.510148][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.534987][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.550738][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.579546][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.613484][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.627289][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.646698][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.679032][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.720109][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.766633][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.793243][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.823378][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.852242][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.883375][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.915215][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.952540][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.979639][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.989686][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.035166][ T7080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.050192][ T7080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.086023][ T7080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.121319][ T7080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.357735][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.369985][ T7232] chnl_net:caif_netlink_parms(): no params data found [ 222.400788][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.458823][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.482053][ T7260] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 222.499784][ T7260] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.561382][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.569723][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.664533][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.741089][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.766985][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.799836][ T7232] device bridge_slave_0 entered promiscuous mode [ 222.833549][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.870523][ T3584] Bluetooth: hci4: command tx timeout [ 222.876428][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.898282][ T7232] device bridge_slave_1 entered promiscuous mode [ 222.962958][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.995241][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.101975][ T7232] team0: Port device team_slave_0 added [ 223.121143][ T7232] team0: Port device team_slave_1 added [ 223.160108][ T7279] batman_adv: batadv0: Adding interface: vlan2 [ 223.180547][ T7279] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.253096][ T7279] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 223.307224][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.326437][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.410657][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.448836][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.476434][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.549082][ T7275] loop3: detected capacity change from 0 to 32768 [ 223.560350][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.611952][ T7275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7275) [ 223.698813][ T7275] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.718318][ T7232] device hsr_slave_0 entered promiscuous mode [ 223.727322][ T7275] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 223.747527][ T7275] BTRFS info (device loop3): setting nodatacow, compression disabled [ 223.770871][ T7232] device hsr_slave_1 entered promiscuous mode [ 223.780177][ T7232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.780251][ T7275] BTRFS info (device loop3): turning on flush-on-commit [ 223.810539][ T7275] BTRFS info (device loop3): enabling auto defrag [ 223.817043][ T7275] BTRFS info (device loop3): max_inline at 0 [ 223.820868][ T7232] Cannot create hsr debugfs directory [ 223.838455][ T7275] BTRFS info (device loop3): using free space tree [ 223.909469][ T4571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.034772][ T4571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.168004][ T4571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.170052][ T7275] BTRFS info (device loop3): enabling ssd optimizations [ 224.194479][ T26] kauditd_printk_skb: 800 callbacks suppressed [ 224.194493][ T26] audit: type=1326 audit(1718528486.846:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc85ee7cea9 code=0x0 [ 224.280004][ T4571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.448444][ T7080] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.950724][ T3584] Bluetooth: hci4: command tx timeout [ 225.405438][ T26] audit: type=1804 audit(1718528488.056:1062): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2555572901/syzkaller.B4Y1Lm/126/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 225.796511][ T7232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.863157][ T7232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.888956][ T7332] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.908110][ T7232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.935674][ T7232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.222799][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.276332][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.287316][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.313243][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.357869][ T4571] device hsr_slave_0 left promiscuous mode [ 226.380098][ T4571] device hsr_slave_1 left promiscuous mode [ 226.412246][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.419693][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.426956][ T26] audit: type=1804 audit(1718528489.066:1063): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2555572901/syzkaller.B4Y1Lm/132/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 226.469251][ T7350] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 226.482617][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.490053][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.512067][ T4571] device bridge_slave_1 left promiscuous mode [ 226.537019][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.546148][ T4571] device bridge_slave_0 left promiscuous mode [ 226.577444][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.622304][ T4571] device veth1_macvtap left promiscuous mode [ 226.628386][ T4571] device veth0_macvtap left promiscuous mode [ 226.651058][ T4571] device veth1_vlan left promiscuous mode [ 226.656932][ T4571] device veth0_vlan left promiscuous mode [ 226.947854][ T7365] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 227.030998][ T3584] Bluetooth: hci4: command tx timeout [ 227.331860][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 227.365201][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 227.396789][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.441138][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.621796][ T4571] bond0 (unregistering): Released all slaves [ 227.721527][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.748133][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.782439][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.789550][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.852221][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.860444][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.911800][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.941291][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.948414][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.007232][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.775671][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.784984][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.795107][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.803763][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.832557][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.848002][ T26] audit: type=1800 audit(1718528491.496:1064): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 228.863057][ T7232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.905651][ T26] audit: type=1800 audit(1718528491.536:1065): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 228.927381][ T7232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.981651][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.989701][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.012337][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.031172][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.039830][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.075254][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.111294][ T3584] Bluetooth: hci4: command tx timeout [ 229.294724][ T7379] loop4: detected capacity change from 0 to 32768 [ 229.365107][ T7379] XFS (loop4): Mounting V5 Filesystem [ 229.411632][ T26] audit: type=1326 audit(1718528492.066:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7399 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fbb07cea9 code=0x0 [ 229.489581][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.491126][ T7379] XFS (loop4): Ending clean mount [ 229.497935][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.511447][ T7379] XFS (loop4): Quotacheck needed: Please wait. [ 229.559542][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.598222][ T7379] XFS (loop4): Quotacheck: Done. [ 229.629504][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 229.644433][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.684957][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.702153][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.728997][ T7232] device veth0_vlan entered promiscuous mode [ 229.737575][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.752630][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.775817][ T7232] device veth1_vlan entered promiscuous mode [ 229.828738][ T7412] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 229.879751][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.897451][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.927741][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.954250][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.988789][ T7232] device veth0_macvtap entered promiscuous mode [ 230.015605][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.033918][ T7232] device veth1_macvtap entered promiscuous mode [ 230.047752][ T7415] xt_socket: unknown flags 0x2 [ 230.055924][ T5345] XFS (loop4): Unmounting Filesystem [ 230.100005][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.141752][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.160824][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.172069][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.182871][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.194696][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.227648][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.251200][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.274842][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.306189][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.392814][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.412091][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.438456][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.461130][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.470979][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.511256][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.531143][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.551132][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.581179][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.604239][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.610703][ T7428] loop4: detected capacity change from 0 to 64 [ 230.628363][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.653578][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.671632][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.682936][ T7232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.722786][ T7232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.751166][ T7232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.772832][ T7232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.817253][ T7433] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.983076][ T7439] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 231.055003][ T3633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.069674][ T3633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.125143][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.153753][ T3633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.172994][ T3633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.202785][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.370939][ T7452] loop1: detected capacity change from 0 to 4096 [ 231.401776][ T7452] ntfs3: loop1: ino=3, Correct links count -> 2. [ 231.452834][ T3578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.467749][ T3578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.477181][ T3578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.487099][ T3578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.495090][ T3578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.502561][ T3578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.548976][ T7452] ntfs3: loop1: failed to convert "0080" to macromanian [ 231.575646][ T7452] ntfs3: loop1: failed to convert name for inode 1e. [ 231.949544][ T7456] chnl_net:caif_netlink_parms(): no params data found [ 232.021487][ T153] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 232.145570][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.153227][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.161653][ T7456] device bridge_slave_0 entered promiscuous mode [ 232.170303][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.177620][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.186348][ T7456] device bridge_slave_1 entered promiscuous mode [ 232.215798][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.227538][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.261492][ T153] usb 2-1: Using ep0 maxpacket: 16 [ 232.274397][ T3578] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 232.300804][ T7456] team0: Port device team_slave_0 added [ 232.326249][ T7456] team0: Port device team_slave_1 added [ 232.381676][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.433855][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.436703][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.461162][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.479906][ T153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.488350][ T7485] loop3: detected capacity change from 0 to 512 [ 232.508224][ T153] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.508627][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.517974][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.542463][ T153] usb 2-1: config 0 descriptor?? [ 232.567435][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.581049][ T7485] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 232.598906][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.601760][ T7485] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 232.625764][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.636300][ T7485] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 232.663602][ T7485] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 232.677271][ T7485] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 232.690255][ T7485] EXT4-fs (loop3): Remounting filesystem read-only [ 232.697106][ T7485] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 232.710200][ T7485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.720663][ T3697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.723793][ T7485] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 232.737684][ T3697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.743997][ T7485] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 232.764499][ T7485] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 232.782310][ T7485] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 232.794211][ T7485] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 232.794843][ T7491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.810621][ T7485] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 232.812018][ T7491] IPv6: NLM_F_CREATE should be set when creating new route [ 232.812103][ T7491] IPv6: NLM_F_CREATE should be set when creating new route [ 232.851627][ T7485] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 232.879817][ T7485] EXT4-fs (loop3): Remounting filesystem read-only [ 232.896920][ T3697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.911047][ T7495] loop1: detected capacity change from 0 to 1024 [ 232.917486][ T3697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.935052][ T7080] EXT4-fs (loop3): unmounting filesystem. [ 232.937379][ T7456] device hsr_slave_0 entered promiscuous mode [ 232.963825][ T7456] device hsr_slave_1 entered promiscuous mode [ 233.003137][ T3697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.015312][ T3697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.051985][ T7495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.112969][ T7467] xt_socket: unknown flags 0x2 [ 233.119474][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.128330][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.151640][ T3697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.166385][ T3697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.190864][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.471657][ T153] usbhid 2-1:0.0: can't add hid device: -71 [ 233.477675][ T153] usbhid: probe of 2-1:0.0 failed with error -71 [ 233.515735][ T153] usb 2-1: USB disconnect, device number 5 [ 233.607734][ T3578] Bluetooth: hci3: command tx timeout [ 233.637744][ T7501] loop3: detected capacity change from 0 to 32768 [ 233.660569][ T7501] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 233.690604][ T7501] XFS (loop3): Mounting V5 Filesystem [ 233.756488][ T7501] XFS (loop3): Ending clean mount [ 233.788743][ T7501] XFS (loop3): Quotacheck needed: Please wait. [ 233.835459][ T7501] XFS (loop3): Quotacheck: Done. [ 233.918446][ T7080] XFS (loop3): Unmounting Filesystem [ 233.948172][ T7232] EXT4-fs (loop1): unmounting filesystem. [ 234.278915][ T3697] device hsr_slave_0 left promiscuous mode [ 234.292703][ T3697] device hsr_slave_1 left promiscuous mode [ 234.343198][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.350759][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.399847][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.430810][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.484728][ T3697] device bridge_slave_0 left promiscuous mode [ 234.491139][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.563847][ T3697] device veth1_macvtap left promiscuous mode [ 234.569923][ T3697] device veth0_macvtap left promiscuous mode [ 234.605948][ T3697] device veth1_vlan left promiscuous mode [ 234.615679][ T3697] device veth0_vlan left promiscuous mode [ 234.632402][ T3578] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 234.791892][ T3578] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 234.800954][ T3578] Bluetooth: hci1: Injecting HCI hardware error event [ 234.815089][ T3584] Bluetooth: hci1: hardware error 0x00 [ 235.105172][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 235.143900][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 235.176120][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.215778][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.413882][ T3697] bond0 (unregistering): Released all slaves [ 235.512720][ T7536] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (32) [ 235.672204][ T3578] Bluetooth: hci3: command tx timeout [ 235.704648][ T7456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.752283][ T7456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.780294][ T7456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.799093][ T7456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.920811][ T7567] loop3: detected capacity change from 0 to 40427 [ 235.968546][ T7567] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 236.001166][ T7567] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.024640][ T7601] loop4: detected capacity change from 0 to 16 [ 236.039928][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.050489][ T7567] F2FS-fs (loop3): invalid crc value [ 236.087449][ T7601] erofs: (device loop4): mounted with root inode @ nid 36. [ 236.105338][ T7606] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (32) [ 236.116432][ T7567] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.124949][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.153290][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.161669][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.166990][ T7608] loop1: detected capacity change from 0 to 1024 [ 236.190316][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.211152][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.224711][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.231884][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.268711][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.287867][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.318963][ T7567] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 236.320342][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.331937][ T7567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 236.333157][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.333883][ T3578] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 236.371847][ T3578] Bluetooth: hci2: Injecting HCI hardware error event [ 236.381504][ T3587] Bluetooth: hci2: hardware error 0x00 [ 236.394195][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.426696][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.442643][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.443448][ T40] hfsplus: b-tree write err: -5, ino 4 [ 236.451425][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.467331][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.476398][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.486941][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.520462][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.550772][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.586410][ T4191] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 236.589557][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.604335][ T4191] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 236.646300][ T7456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.683080][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.707498][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.723423][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.762248][ T7618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.769548][ T7618] IPv6: NLM_F_CREATE should be set when creating new route [ 236.776962][ T7618] IPv6: NLM_F_CREATE should be set when creating new route [ 236.813343][ T7621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 236.879713][ T3584] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 237.156693][ T7639] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (32) [ 237.370525][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.387311][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.418038][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.477137][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.492855][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.552822][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.561325][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.603239][ T7456] device veth0_vlan entered promiscuous mode [ 237.621025][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.629283][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.653404][ T7456] device veth1_vlan entered promiscuous mode [ 237.712672][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.731498][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.752122][ T3578] Bluetooth: hci3: command tx timeout [ 237.762822][ T7456] device veth0_macvtap entered promiscuous mode [ 237.784403][ T7634] loop1: detected capacity change from 0 to 32768 [ 237.803063][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.811903][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.830505][ T7634] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7634) [ 237.855724][ T7456] device veth1_macvtap entered promiscuous mode [ 237.890704][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.898906][ T7634] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 237.910185][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.930845][ T7634] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 237.953615][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.987673][ T7634] BTRFS info (device loop1): force zlib compression, level 3 [ 237.991037][ T7641] loop3: detected capacity change from 0 to 32768 [ 237.998131][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.021967][ T7634] BTRFS info (device loop1): force clearing of disk cache [ 238.029296][ T7634] BTRFS info (device loop1): setting nodatasum [ 238.036039][ T7641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7641) [ 238.042142][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.062452][ T7634] BTRFS info (device loop1): allowing degraded mounts [ 238.069264][ T7634] BTRFS info (device loop1): enabling disk space caching [ 238.093559][ T7641] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.101904][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.119119][ T7634] BTRFS info (device loop1): disk space caching is enabled [ 238.122131][ T7641] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 238.142810][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.153806][ T7641] BTRFS info (device loop3): using free space tree [ 238.179462][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.198977][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.233324][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.270738][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.309688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.324644][ T7634] BTRFS info (device loop1): rebuilding free space tree [ 238.341393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.398307][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.423910][ T7641] BTRFS info (device loop3): enabling ssd optimizations [ 238.442209][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.474167][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.486810][ T7634] BTRFS info (device loop1): disabling free space tree [ 238.504223][ T7634] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.505649][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.535002][ T7634] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.546795][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 238.552259][ T3587] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 238.582197][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.659537][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.700084][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.720886][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.741845][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.756307][ T7634] BTRFS error (device loop1): balance: invalid convert metadata profile single [ 238.784124][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.800482][ T26] audit: type=1800 audit(1718528501.454:1067): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 238.828423][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.845772][ T7232] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 238.855821][ T7456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.882262][ T7456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.891153][ T26] audit: type=1800 audit(1718528501.464:1068): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 238.922180][ T7456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.937541][ T7456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.962381][ T3584] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 239.149659][ T7699] overlayfs: failed to clone upperpath [ 239.358803][ T7692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.599843][ T3962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.613563][ T3962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.697349][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.735044][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.779488][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.832556][ T47] Bluetooth: hci3: command tx timeout [ 239.848665][ T7708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.127217][ T7705] BTRFS error (device loop3: state M): unrecognized mount option 'ÿÿÿÿ017777777777777777777770177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 240.199040][ T7720] loop0: detected capacity change from 0 to 4096 [ 240.232068][ T7720] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 240.305810][ T7720] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 240.364545][ T7080] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.810569][ T3587] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 240.881941][ T7743] loop0: detected capacity change from 0 to 16 [ 240.954401][ T7743] erofs: (device loop0): mounted with root inode @ nid 36. [ 241.032631][ T3584] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 241.188284][ T7739] device bond0 entered promiscuous mode [ 241.473546][ T7739] device bond_slave_0 entered promiscuous mode [ 241.531906][ T7739] device bond_slave_1 entered promiscuous mode [ 241.907980][ T7068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 241.932667][ T7068] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 241.983722][ T7068] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 242.058329][ T7768] loop4: detected capacity change from 0 to 1024 [ 242.178122][ T4191] hfsplus: b-tree write err: -5, ino 4 [ 242.420161][ T7785] overlayfs: failed to clone upperpath [ 242.659822][ T7782] loop4: detected capacity change from 0 to 40427 [ 242.665357][ T7782] F2FS-fs (loop4): invalid crc value [ 242.707778][ T7782] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.732766][ T26] audit: type=1800 audit(1718528505.384:1069): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 242.753190][ T7782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 242.872997][ T3587] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 243.170453][ T3584] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 244.678985][ T7813] loop0: detected capacity change from 0 to 1024 [ 244.824273][ T3962] hfsplus: b-tree write err: -5, ino 4 [ 244.843175][ T26] audit: type=1804 audit(1718528507.494:1070): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4257175337/syzkaller.JLSuwe/25/bus" dev="sda1" ino=1948 res=1 errno=0 [ 244.949255][ T7819] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 244.960937][ T3587] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 245.176139][ T26] audit: type=1800 audit(1718528507.834:1071): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 245.273156][ T3584] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 245.285623][ T7835] loop1: detected capacity change from 0 to 1024 [ 245.418250][ T7835] input: syz0 as /devices/virtual/input/input12 [ 245.563805][ T7704] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 245.640605][ T7704] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 245.641673][ T7704] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 245.681619][ T7837] loop0: detected capacity change from 0 to 40427 [ 245.685377][ T7837] F2FS-fs (loop0): invalid crc value [ 245.710880][ T7837] F2FS-fs (loop0): Found nat_bits in checkpoint [ 245.752446][ T7837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 245.780396][ T11] hfsplus: b-tree write err: -5, ino 4 [ 245.975795][ T7703] kernel write not supported for file /admmidi2 (pid: 7703 comm: kworker/0:15) [ 247.033279][ T3587] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 247.078715][ T7887] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 247.284523][ T26] audit: type=1804 audit(1718528509.933:1072): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2555572901/syzkaller.B4Y1Lm/174/bus" dev="sda1" ino=1955 res=1 errno=0 [ 247.570128][ T7923] loop1: detected capacity change from 0 to 256 [ 247.704026][ T7930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 247.783282][ T7923] loop1: detected capacity change from 256 to 0 [ 247.811992][ C0] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.824080][ T7932] FAT-fs (loop1): unable to read inode block for updating (i_pos 203) [ 247.843391][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 247.862865][ T7932] FAT-fs (loop1): unable to read inode block for updating (i_pos 203) [ 247.899116][ T26] audit: type=1804 audit(1718528510.553:1073): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2337687607/syzkaller.uOw3ao/45/bus" dev="sda1" ino=1947 res=1 errno=0 [ 248.128466][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.146735][ T7232] FAT-fs (loop1): Directory bread(block 3) failed [ 248.190930][ T26] audit: type=1800 audit(1718528510.843:1074): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 248.235690][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.246258][ T7232] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 248.456836][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.466611][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.487357][ T7959] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 249.374769][ T3587] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 249.456643][ T26] audit: type=1804 audit(1718528512.113:1075): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2117261482/syzkaller.z8A99c/13/bus" dev="sda1" ino=1950 res=1 errno=0 [ 249.529659][ T3633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.660770][ T3633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.686555][ T26] audit: type=1800 audit(1718528512.343:1076): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 249.752871][ T3633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.867450][ T3633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.891110][ T26] audit: type=1800 audit(1718528512.543:1077): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="overlay" ino=1965 res=0 errno=0 [ 249.979568][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.992910][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.006385][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.017054][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.026830][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 250.037198][ T3578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.377212][ T7996] loop3: detected capacity change from 0 to 1024 [ 250.545187][ T7996] hfsplus: xattr searching failed [ 250.581837][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 250.634669][ T7996] hfsplus: b-tree write err: -5, ino 3 [ 250.851009][ T8012] loop3: detected capacity change from 0 to 1024 [ 250.867839][ T8012] EXT4-fs: Ignoring removed orlov option [ 250.886730][ T8012] EXT4-fs (loop3): Test dummy encryption mode enabled [ 250.918403][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.923447][ T8012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.933690][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.943079][ T7984] device bridge_slave_0 entered promiscuous mode [ 250.946868][ T8016] loop4: detected capacity change from 0 to 1024 [ 250.972117][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.997575][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.006544][ T7984] device bridge_slave_1 entered promiscuous mode [ 251.021097][ T8016] input: syz0 as /devices/virtual/input/input13 [ 251.054719][ T7080] EXT4-fs (loop3): unmounting filesystem. [ 251.084938][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.098954][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.152801][ T11] hfsplus: b-tree write err: -5, ino 4 [ 251.181509][ T7984] team0: Port device team_slave_0 added [ 251.238709][ T7984] team0: Port device team_slave_1 added [ 251.247304][ T8031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.442232][ T3587] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 251.754724][ T8043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.855974][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.909205][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.175781][ T3587] Bluetooth: hci4: command tx timeout [ 252.184808][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.200057][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.208259][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.234414][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.381955][ T7984] device hsr_slave_0 entered promiscuous mode [ 252.409571][ T7984] device hsr_slave_1 entered promiscuous mode [ 252.451529][ T8050] loop4: detected capacity change from 0 to 256 [ 252.459108][ T7984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.487471][ T7984] Cannot create hsr debugfs directory [ 252.615633][ T3633] device hsr_slave_0 left promiscuous mode [ 252.629467][ T5345] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 252.639685][ T3633] device hsr_slave_1 left promiscuous mode [ 252.650484][ T5345] FAT-fs (loop4): Filesystem has been set read-only [ 252.675232][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.680762][ T5345] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 252.682667][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.728496][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.743899][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.745584][ T8058] loop3: detected capacity change from 0 to 1024 [ 252.766314][ T3633] device bridge_slave_1 left promiscuous mode [ 252.775962][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.798020][ T3633] device bridge_slave_0 left promiscuous mode [ 252.811619][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.841731][ T8058] input: syz0 as /devices/virtual/input/input14 [ 252.851737][ T3633] device veth1_macvtap left promiscuous mode [ 252.865096][ T3633] device veth0_macvtap left promiscuous mode [ 252.890356][ T3633] device veth1_vlan left promiscuous mode [ 252.900629][ T4571] hfsplus: b-tree write err: -5, ino 4 [ 252.906489][ T3633] device veth0_vlan left promiscuous mode [ 253.387826][ T3633] team0 (unregistering): Port device team_slave_1 removed [ 253.874581][ T8060] loop0: detected capacity change from 0 to 32768 [ 253.919257][ T3633] team0 (unregistering): Port device team_slave_0 removed [ 254.128791][ T8060] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8060) [ 254.164420][ T3633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.192840][ T8081] loop3: detected capacity change from 0 to 1024 [ 254.199842][ T3633] device bond_slave_1 left promiscuous mode [ 254.212135][ T3633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.225914][ T3633] device bond_slave_0 left promiscuous mode [ 254.234039][ T3578] Bluetooth: hci4: command tx timeout [ 254.245473][ T8060] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 254.264144][ T8060] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 254.273676][ T8060] BTRFS info (device loop0): force zlib compression, level 3 [ 254.281817][ T8060] BTRFS info (device loop0): force clearing of disk cache [ 254.290371][ T8060] BTRFS info (device loop0): setting nodatasum [ 254.297811][ T8060] BTRFS info (device loop0): allowing degraded mounts [ 254.305955][ T8060] BTRFS info (device loop0): enabling disk space caching [ 254.312343][ T8081] hfsplus: xattr searching failed [ 254.313167][ T8060] BTRFS info (device loop0): disk space caching is enabled [ 254.377394][ T3633] bond0 (unregistering): Released all slaves [ 254.400019][ T8081] hfsplus: b-tree write err: -5, ino 3 [ 254.413939][ T8060] BTRFS info (device loop0): rebuilding free space tree [ 254.524214][ T8060] BTRFS info (device loop0): disabling free space tree [ 254.532796][ T8060] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 254.595124][ T8060] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 254.813132][ T8060] BTRFS error (device loop0): balance: invalid convert metadata profile single [ 254.836962][ T7456] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 255.068578][ T8116] loop3: detected capacity change from 0 to 512 [ 255.128103][ T8116] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.176084][ T8116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.268124][ T8116] EXT4-fs (loop3): 1 truncate cleaned up [ 255.274850][ T8116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.466593][ T7080] EXT4-fs (loop3): unmounting filesystem. [ 255.596680][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.603966][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.644696][ T3587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.662141][ T3587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.672950][ T3587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.695212][ T3587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.706126][ T3587] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.715668][ T3587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.724048][ T26] audit: type=1800 audit(1718528518.372:1078): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=1957 res=0 errno=0 [ 256.313024][ T8124] chnl_net:caif_netlink_parms(): no params data found [ 256.330449][ T3578] Bluetooth: hci4: command tx timeout [ 256.487790][ T7984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.635405][ T7984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.661736][ T8155] loop0: detected capacity change from 0 to 512 [ 256.679062][ T7984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.709062][ T8155] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.767950][ T8155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 256.781530][ T7984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.810705][ T8160] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.856578][ T8155] EXT4-fs (loop0): 1 truncate cleaned up [ 256.903735][ T8155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.955336][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.962495][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.988984][ T8124] device bridge_slave_0 entered promiscuous mode [ 257.007539][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.022900][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.043860][ T8124] device bridge_slave_1 entered promiscuous mode [ 257.063505][ T7456] EXT4-fs (loop0): unmounting filesystem. [ 257.138096][ T8124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.171038][ T8124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.244886][ T3620] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 257.271329][ T8124] team0: Port device team_slave_0 added [ 257.298205][ T8124] team0: Port device team_slave_1 added [ 257.394098][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.425147][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.482082][ T8124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.524126][ T8124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.524586][ T3620] usb 4-1: Using ep0 maxpacket: 32 [ 257.544287][ T8124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.601151][ T8189] loop0: detected capacity change from 0 to 64 [ 257.601462][ T8124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.643274][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.664763][ T3620] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 257.714623][ T8191] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.722492][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.745098][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.754667][ T3578] Bluetooth: hci0: command tx timeout [ 257.760628][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.801499][ T8124] device hsr_slave_0 entered promiscuous mode [ 257.829147][ T8124] device hsr_slave_1 entered promiscuous mode [ 257.844676][ T3620] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 257.853890][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.862026][ T3620] usb 4-1: Product: syz [ 257.862056][ T8124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.874569][ T3620] usb 4-1: Manufacturer: syz [ 257.879212][ T3620] usb 4-1: SerialNumber: syz [ 257.885416][ T8124] Cannot create hsr debugfs directory [ 257.905339][ T3620] usb 4-1: config 0 descriptor?? [ 257.924787][ T8166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.945114][ T3620] hub 4-1:0.0: bad descriptor, ignoring hub [ 257.951056][ T3620] hub: probe of 4-1:0.0 failed with error -5 [ 257.967249][ T3620] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 257.976740][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.997574][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.023308][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.030504][ T5016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.065447][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.075779][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.084804][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.091967][ T5016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.106419][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.149850][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.165920][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.219322][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.234057][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.242928][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.252525][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.261948][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.277284][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.299704][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.398156][ T3578] Bluetooth: hci4: command tx timeout [ 258.417033][ T7984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.432110][ T7984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.441537][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.450507][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.571849][ T8124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.575400][ T8221] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.667648][ T8124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.701221][ T8217] loop0: detected capacity change from 0 to 8 [ 259.721259][ T8217] squashfs: Unknown parameter '0x0000000000000006 ' [ 259.745965][ T8124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.779192][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.787806][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.799739][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.815090][ T8124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.834928][ T3584] Bluetooth: hci0: command tx timeout [ 259.863475][ T7984] device veth0_vlan entered promiscuous mode [ 259.881973][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.909016][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.923006][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.933280][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.948083][ T7984] device veth1_vlan entered promiscuous mode [ 259.957988][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.966306][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.974208][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.072364][ T7704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.082879][ T7704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.091528][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.092077][ T7704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.122232][ T7984] device veth0_macvtap entered promiscuous mode [ 260.174432][ T7984] device veth1_macvtap entered promiscuous mode [ 260.245590][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.270238][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.294841][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.308559][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.344853][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.371075][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.393406][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.419682][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.434641][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.456193][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.464242][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.485817][ T3617] usb 4-1: USB disconnect, device number 5 [ 260.490116][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.499818][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 260.530078][ T8247] loop0: detected capacity change from 0 to 1024 [ 260.538638][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.560608][ T8124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.568873][ T8247] EXT4-fs: Ignoring removed orlov option [ 260.575221][ T8247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.587963][ T8124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.624682][ T8124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.645516][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.660425][ T8247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 260.681759][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.729921][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.746048][ T8247] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.0: corrupt xattr in inline inode [ 260.758906][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.772273][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.773912][ T8247] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr [ 260.783266][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.805829][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.817240][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.829099][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.837098][ T8124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.838227][ T7456] ================================================================== [ 260.851842][ T7456] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 260.859818][ T7456] Read of size 4 at addr ffff8880521e4000 by task syz-executor.0/7456 [ 260.867971][ T7456] [ 260.870280][ T7456] CPU: 1 PID: 7456 Comm: syz-executor.0 Not tainted 6.1.93-syzkaller #0 2024/06/16 09:02:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 260.878599][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 260.888663][ T7456] Call Trace: [ 260.891930][ T7456] [ 260.894854][ T7456] dump_stack_lvl+0x1e3/0x2cb [ 260.899563][ T7456] ? nf_tcp_handle_invalid+0x642/0x642 [ 260.905044][ T7456] ? panic+0x764/0x764 [ 260.909114][ T7456] ? _printk+0xd1/0x111 [ 260.913271][ T7456] ? __virt_addr_valid+0x17f/0x520 [ 260.918565][ T7456] ? __virt_addr_valid+0x17f/0x520 [ 260.923663][ T7456] print_report+0x15f/0x4f0 [ 260.928161][ T7456] ? __virt_addr_valid+0x17f/0x520 [ 260.933279][ T7456] ? __virt_addr_valid+0x17f/0x520 [ 260.938394][ T7456] ? __virt_addr_valid+0x44a/0x520 [ 260.943516][ T7456] ? __phys_addr+0xb6/0x170 [ 260.948039][ T7456] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 260.953772][ T7456] kasan_report+0x136/0x160 [ 260.958282][ T7456] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 260.963934][ T7456] ext4_xattr_delete_inode+0xcd0/0xce0 [ 260.969577][ T7456] ? ext4_blocks_for_truncate+0x270/0x270 [ 260.975301][ T7456] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 260.981376][ T7456] ? rcu_read_lock_any_held+0xb3/0x160 [ 260.986846][ T7456] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 260.992750][ T7456] ext4_evict_inode+0xc77/0x1150 [ 260.997693][ T7456] ? _raw_spin_unlock+0x24/0x40 [ 261.002553][ T7456] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 261.008456][ T7456] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 261.014357][ T7456] evict+0x2a4/0x620 [ 261.018264][ T7456] vfs_rmdir+0x381/0x4b0 [ 261.022513][ T7456] do_rmdir+0x3a2/0x590 [ 261.026677][ T7456] ? d_delete_notify+0x150/0x150 [ 261.031624][ T7456] ? syscall_enter_from_user_mode+0x2e/0x230 [ 261.037614][ T7456] __x64_sys_unlinkat+0xdc/0xf0 [ 261.042479][ T7456] do_syscall_64+0x3b/0xb0 [ 261.046907][ T7456] ? clear_bhb_loop+0x45/0xa0 [ 261.051597][ T7456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.057502][ T7456] RIP: 0033:0x7f939567c687 [ 261.062013][ T7456] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 261.081713][ T7456] RSP: 002b:00007fff495695d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 261.090130][ T7456] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f939567c687 [ 261.098283][ T7456] RDX: 0000000000000200 RSI: 00007fff4956a780 RDI: 00000000ffffff9c [ 261.106359][ T7456] RBP: 00007f93956d9636 R08: 0000000000000000 R09: 0000000000000000 [ 261.114388][ T7456] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff4956a780 [ 261.122372][ T7456] R13: 00007f93956d9636 R14: 000000000003f94a R15: 0000000000000008 [ 261.130371][ T7456] [ 261.133396][ T7456] [ 261.135715][ T7456] The buggy address belongs to the physical page: [ 261.142162][ T7456] page:ffffea0001487900 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x521e4 [ 261.152579][ T7456] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 261.159705][ T7456] raw: 00fff00000000000 ffffea000147af08 ffffea00014bb708 0000000000000000 [ 261.168298][ T7456] raw: 0000000000000001 0000000000000001 00000000ffffff7f 0000000000000000 [ 261.176879][ T7456] page dumped because: kasan: bad access detected [ 261.183294][ T7456] page_owner tracks the page as freed [ 261.188659][ T7456] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8242, tgid 8240 (syz-executor.2), ts 260392816118, free_ts 260482477960 [ 261.206730][ T7456] post_alloc_hook+0x18d/0x1b0 [ 261.211505][ T7456] get_page_from_freelist+0x31a1/0x3320 [ 261.217146][ T7456] __alloc_pages+0x28d/0x770 [ 261.221744][ T7456] __folio_alloc+0xf/0x30 [ 261.226079][ T7456] vma_alloc_folio+0x486/0x990 [ 261.230846][ T