last executing test programs: 4m19.601924058s ago: executing program 4 (id=1276): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m19.081186429s ago: executing program 4 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a040000) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', 0x100}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) capset(0x0, 0x0) futex(&(0x7f0000004000), 0x0, 0x0, 0x0, &(0x7f0000004000), 0x30004000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x0, "d2c4924d08b1e22900000000000000f3f70000000400"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) 3m29.001796165s ago: executing program 4 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup2(r1, r1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) 3m28.770974617s ago: executing program 4 (id=1439): syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@prjquota}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpquota}, {@norecovery}]}, 0x0, 0x464, &(0x7f0000000a40)="$eJzs3MtvVNUfAPDvnU7L+9f+EEUQtIpG4qOl5SELY6LRRBNNTHSBcVXbQiqFGloTIUTRBS4NiXvj0v/AuNKNUVcmbnVvSIhhA7oac19laGdKh850KvP5JBfOmXtvzvnec8/MuedwCaBnDad/JBHbI+L3iBjMs7cfMJz/dfP6xcm/r1+cTKJWe+uvJDvuxvWLk+Wh5Xnb8kytVuQ3NSj38rsRE7Oz0+eK/OjCmQ9G589feHbmzMSp6VPTZ8ePHz9yeP/AsfGj9adV7jbONK4bez+e27fn1XeuvDF54sp7P+9+oW5/fRztMpxf3YaeaHdhXbajLp1Uu1gRWtIXEWlz9Wf9fzD6YsvivsF45bOuVg7oqFqtVmv0+1y4VAPuYUl0uwZAd5Q/9Onzb7mt09BjQ7j2Yv4AlMZ9s9jyPdVssmGgeDba0aHyhyPixKV/vkq3yNphoEMlAQDkvk/HP880Gv9V4oE8kQ1I/lesoQxFxP8jYmdE3BcRuyLi/ojs2N0R8WCL5S9dIVk2/kzi6t1Hd2fp+O/5Ym3r9vHf4lLTUF+R25HF35+cnJmdPpRfk0pE/6aTM8n02Apl/PDyb18021c//ku3tPxyLFjU42p1yQTd1MTCxFpirnft04i91UbxJ1Eu4yQRsSci9i47e8uqyph56pt9zfbdOf4VtGGdqfZ1xJN5+1+KJfGXkqbrk2PPHRs/Oro5ZqcPjZZ3xXK//Hr5zWblryn+Nkjbf2vD+38x/qFkc8T8+Quns/Xa+dbLuPzH502fKe/2/h9I3s7S5dPSRxMLC+fGIgaS16vLPh+/dW6ZL49P4z94oHH/3xm3rsRDEZHexPsj4uGIeKSo+6MR8VhEHFgh/p9eevz91uNfYVa+jdL4p+7U/lHf/q0n+k7/+F3r8ZfS9j+SpQ4Wn6zm+2+1FVzLtQMAAID/ikpEbI+kMrKYrlRGRvJ/w78rtlZm5+YXnj459+HZqfwdgaHor5QzXYN186FjxdxwmR9fkj9czBt/2bcly49Mzs1OdTt46HHbmvT/1J993a4d0HHe14Lepf9D79L/oXfp/9C79H/oXY36/ydNjx75tqOVAdaV33/oXfo/9C79H3pXw/7/2vrXA1hXTd+Nr6zplX+Jez4RlQ1Rjc4korohqpElqqv+zyxaSNQG8/6ffrKp4THd/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj38DAAD//45i4LM=") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r2, r1, 0x0, 0x100800001) 3m25.38796353s ago: executing program 4 (id=1442): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) fchdir(r0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000280)='maps\x00') 3m22.817749177s ago: executing program 4 (id=1448): mkdir(0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100), 0x8) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r3, &(0x7f00000000c0)="6a767354b3abc74d83a261d7d3b5", 0xe, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b40)}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0xb4, 0x0) 2m55.052968687s ago: executing program 1 (id=1538): prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000000000/0x1000)=nil) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd5f) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000100000000000f0000002400078008000200040000000c000400003f0000140000000c0003"], 0x38}}, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1000008, &(0x7f0000001000)=ANY=[@ANYRESHEX=r0], 0x1, 0xc39, &(0x7f0000000240)="$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") socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYBLOB="c115047b0a45243cb4d26b6e9fff8085bb67e1e0a0f8be7bdf3e81bca2aae86ae9846d679ff070b1e51d3829b02fe3b0a02775624277e92a9205c5a1b6639e8976210b7f", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x11, &(0x7f0000000000)={[{@nombcache}, {@resuid}, {@norecovery}, {@noblock_validity}, {@block_validity}]}, 0x8, 0x616, &(0x7f0000000240)="$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") setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0xffffff3c}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0) 2m51.269126918s ago: executing program 1 (id=1546): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000002900000003"], 0x88}}], 0x1, 0x0) 2m51.059803874s ago: executing program 1 (id=1547): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x200000a, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1513, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0xc0185879, &(0x7f0000000000)) 2m50.459596651s ago: executing program 1 (id=1548): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) socket(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, &(0x7f0000000100)={r3}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400000, &(0x7f0000000100)={[{}, {@noblock_validity}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@nogrpid}, {@noinit_itable}, {}, {@resuid, 0x32}]}, 0x1b, 0x4e4, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1b40402, &(0x7f0000001300)={[], [{@smackfshat={'smackfshat', 0x3d, '%-,,&%@'}}, {@smackfshat={'smackfshat', 0x3d, '-]CZH\xa6\x12\x10\xbe\xd4=\x1f\x17\x18\xc3\x9bR3S@\x90\x98\xa48\x9c\x93\x80\xaa\xf8M\xee\xe4\xe2\xb3\xb7R\x87\x15\xc1\xdf\xa0\xe5\xed\xbbgD&'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x49b, &(0x7f0000000100)="$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") r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002800)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000002840)='syz1\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800632f77fbac141416ac14141686089ffe4d2f8702860c", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f00000012c0)={0x0, &(0x7f0000001280)="e20c97a6995e888220c6f9407e727a64b9c8895494120d934dfb9c88bfb9496908f0d7da0e2e1d10b8dcc6d07f238982ceb33c49d2361487f9a3a5d7d387", 0x3e}) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000001c0)) mount(&(0x7f0000001180)=@md0, &(0x7f00000011c0)='./bus\x00', &(0x7f0000001200)='ncpfs\x00', 0x80a, 0x0) 2m48.004113205s ago: executing program 1 (id=1550): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) 2m47.43551424s ago: executing program 1 (id=1552): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002540), r0) 50.592847981s ago: executing program 5 (id=1862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 50.391428709s ago: executing program 5 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 49.440013738s ago: executing program 5 (id=1865): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="010000000037df0600000000", 0xc, r0) 49.341741598s ago: executing program 5 (id=1866): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYRES64=r4, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 47.677496941s ago: executing program 5 (id=1872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x19, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) r4 = inotify_init1(0x0) fcntl$setstatus(r4, 0x4, 0x2400) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x101c08a, &(0x7f00000003c0)=ANY=[@ANYBLOB="726f6469722c726f6469722c696f636861727365743d63703433372c696f636861727365743d63703733372c726f6469722c636f6465706167653d313235312c73686f72746e616d653d77696e39352c726f6469722c757466383d312c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d302c726f6469722c696f636861727365743d63703836332c00de9784e4d49a8900bd2595c7467be73cb2"], 0x1, 0x2e8, &(0x7f0000000640)="$eJzs3T9rZFUUAPDzJjNvRi0mhZUIPtDCatlsa2GC7IKYyiWFWmhwsyCZICQQcRWfW4mdjaWfQBD8IDZ2loKtYOcKC1fen/mXfTvZiBNx8/sVk5v7zrn33Hk3mdfk5oMXjw7vFHH3/ue/xmiURW97GPEgi83oxdSXsWT7mwAA/s8epBR/pEbH5V++XpE7WmNdAMD6nPP53+rXr1n18uOllQYArMntd959a2d39+bbRTGKW0dfne5Vn/LV1+b6zt34KCZxENdjHA8j6geFQdRPC1XzVkqp7BeVzXjlqDzdqzKP3v+pHX/n94g6fyvGsVl3zZ426vw3d29uFY2F/LKq49l2/u0q/0aM4/lZ8lL+jY782Mvj1ZcX6r8W4/j5w/g4JnGnLmKe/8VWUbyRvv3zs/eq8qr8rDzdG9Zxc2ljOnl5yfcIAAAAAAAAAAAAAAAAAAAAAICnz7X27Jxh1Of3VF3t+TsbD6tvBlFMbS6fz9PkZ9OB5ucDRS+lVKb4bnq+zvWiKFIbOM/vxwv99mBBAAAAAAAAAAAAAAAAAAAAuOJOPr13uD+ZHBz/K43paQD9iPjrdsQ/HWd7oeelWB08bOfcn0x6bXM5pr/YExvTmCyia8CUmuv3qkWcU2pvVWHtOPEES37mkZrbxvc/dGZVKzrpd448Ov/tHXTPdcHGJ4NmeZ0xMVt71v0eDmfFj6obF2dvXB7dsw/iTE/+aExRN5qtOHjMOIf7r8+3zcHxSd4ZM77w25I/VzfKFTGRrfq5eO23dvsdzlaxFJM/fkcN2sZC+pm9cd5+btJHTfqZXxR5ROa0DgAAAAAAAAAAAAAAAAAAWKv5X/92XLy/MrWXhmsrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu1fz//1+gUbbJTxCcx/HJf7xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAroC/AwAA///+PFAg") getdents(0xffffffffffffffff, &(0x7f0000000100)=""/196, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) 45.805551054s ago: executing program 2 (id=1875): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents(r0, &(0x7f0000000040)=""/99, 0x63) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0xc}}, 0x20) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) 45.732174532s ago: executing program 5 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'm'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x78}}, 0x0) 45.501843404s ago: executing program 2 (id=1878): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, 0xffffffffffffffff) 45.379351338s ago: executing program 2 (id=1879): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f80)='./file0\x00', 0x4000, &(0x7f0000002480)=ANY=[], 0x2, 0xc47, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x81fd) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, &(0x7f00000054c0)=""/81, &(0x7f0000000080)=0x35) 44.952246194s ago: executing program 2 (id=1880): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYRES64=r4, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r4, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 43.53594513s ago: executing program 2 (id=1881): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}}, 0x0) 41.095506778s ago: executing program 2 (id=1882): r0 = socket(0x11, 0xa, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$packet(r0, 0x0, 0x0) 3.48013057s ago: executing program 3 (id=1911): r0 = syz_io_uring_setup(0xff9, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000), 0x2) 3.286883595s ago: executing program 3 (id=1912): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x80000c, &(0x7f00000006c0)={[{@barrier}, {@nls={'nls', 0x3d, 'cp865'}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@barrier}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@part={'part', 0x3d, 0x1f}}, {@uid}, {@umask={'umask', 0x3d, 0x1}}, {@uid}, {}, {@creator={'creator', 0x3d, "65fd44c2"}}, {@nodecompose}, {@gid}, {@uid}, {@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'cp737'}}, {@barrier}, {@force}, {}, {@barrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@barrier}, {@barrier}, {@type={'type', 0x3d, "fe453e62"}}, {@session={'session', 0x3d, 0x9}}, {@uid}]}, 0x1, 0x6da, &(0x7f0000004980)="$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") setxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) clock_gettime(0x0, &(0x7f0000004fc0)) r6 = syz_open_dev$vbi(&(0x7f0000001b40), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000004580)={0x10002, 0x0, "344b1f117c98008c08d06735975b761cab68a9764941f18e"}) dup(r0) 2.019958004s ago: executing program 3 (id=1913): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 1.920172581s ago: executing program 0 (id=1914): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000001c0)={0x18, r1, 0x3, 0x0, &(0x7f0000000200)=[{0x0, 0x81}, {0x538a, 0x80000000}, {}]}) 1.809179694s ago: executing program 0 (id=1915): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfeedcafe, 0x0, 0x0, 0x0, 0x1}}) 1.752969314s ago: executing program 3 (id=1916): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x81785501, &(0x7f0000000440)=""/110) 1.657908165s ago: executing program 3 (id=1917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xffffff85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89f0, &(0x7f0000000000)={'gre0\x00', 0x20010001}) 1.572178017s ago: executing program 0 (id=1918): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x400002, 0x0, &(0x7f0000000080)=0x5e) 1.481455946s ago: executing program 0 (id=1919): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x22) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x57f, &(0x7f0000000640)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4, &(0x7f0000000300)={[{@nostrict}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x22}}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@dmode={'dmode', 0x3d, 0x8}}, {@noadinicb}, {@noadinicb}]}, 0xff, 0xc43, &(0x7f0000001040)="$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") pread64(r1, &(0x7f000000ac80)=""/186, 0xba, 0x0) read$FUSE(r1, &(0x7f000000ad40)={0x2020}, 0x2020) 1.0664196s ago: executing program 0 (id=1920): syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x1, 0x5b5e, &(0x7f0000005b80)="$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") unlink(&(0x7f0000000140)='./file1\x00') 189.944405ms ago: executing program 3 (id=1921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000a0a01"], 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) 0s ago: executing program 0 (id=1922): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x100}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x74}, {0x25}, {0x6}]}) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getegid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x9, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000008000000000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x7, 0x0, &(0x7f0000001a40)="2b206d074843b3", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000002c0)="f3d90772df607e175b7c79d9fce35c5a", 0x10) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x90) fsopen(0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x6, 0x4, 0x0, 0xf0ff1f00000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000180)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x13}, 0x90) r6 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r6, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238", 0x4e}, {&(0x7f0000000480)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f", 0xb2}, {&(0x7f0000001200)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb2805e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a", 0xe9}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): [ 494.747430][T10914] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 494.961034][T10924] loop2: detected capacity change from 0 to 1024 [ 494.989836][T10924] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 495.042225][T10924] JBD2: no valid journal superblock found [ 495.055233][T10924] EXT4-fs (loop2): Could not load journal inode [ 495.178745][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'. [ 495.310824][T10924] loop2: detected capacity change from 0 to 512 [ 495.358716][T10924] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.374518][T10924] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent [ 495.501871][T10924] loop2: detected capacity change from 0 to 512 [ 495.779844][T10935] loop5: detected capacity change from 0 to 32768 [ 495.887113][T10935] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 495.997322][T10935] XFS (loop5): Ending clean mount [ 496.020104][T10935] XFS (loop5): Quotacheck needed: Please wait. [ 496.057452][T10924] loop2: detected capacity change from 0 to 512 [ 496.116706][T10924] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1559: casefold flag without casefold feature [ 496.139141][T10924] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1559: couldn't read orphan inode 15 (err -117) [ 496.154013][T10924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.324294][T10935] XFS (loop5): Quotacheck: Done. [ 497.079648][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.103732][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.697165][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.779521][T10954] netlink: 'syz.3.1570': attribute type 8 has an invalid length. [ 497.809776][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 497.855241][T10370] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 497.897367][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 498.164554][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 498.448889][ T5154] kernel read not supported for file /rfkill (pid: 5154 comm: kworker/0:3) [ 498.551710][T10969] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 498.656004][ T29] audit: type=1326 audit(1720438524.032:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10960 comm="syz.2.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c5e975bd9 code=0x0 [ 499.242571][T10973] loop3: detected capacity change from 0 to 1156 [ 499.330880][T10975] loop5: detected capacity change from 0 to 256 [ 499.377340][T10975] exfat: Deprecated parameter 'utf8' [ 499.433079][T10975] exfat: Deprecated parameter 'utf8' [ 499.446356][T10975] exfat: Deprecated parameter 'utf8' [ 499.583084][T10975] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 499.867291][T10985] loop2: detected capacity change from 0 to 1024 [ 499.943692][T10985] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 500.408469][T10993] loop3: detected capacity change from 0 to 1024 [ 500.493149][T10993] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 500.504477][T10993] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 500.514476][T10993] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32907!=20869) [ 500.527070][T10993] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 500.537339][T10993] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 500.761725][T10985] JBD2: no valid journal superblock found [ 500.767602][T10985] EXT4-fs (loop2): Could not load journal inode [ 501.004094][T10985] loop2: detected capacity change from 0 to 512 [ 501.038034][T10985] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 501.065918][T10985] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent [ 501.191451][T10985] loop2: detected capacity change from 0 to 512 [ 501.317325][ T9906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.327832][T10985] loop2: detected capacity change from 0 to 512 [ 501.344565][ T9906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.358524][ T9906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.367443][T11000] loop5: detected capacity change from 0 to 512 [ 501.405007][ T9906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.415135][T10985] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1580: casefold flag without casefold feature [ 501.454158][T10985] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1580: couldn't read orphan inode 15 (err -117) [ 501.460903][ T9906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 501.469780][T10985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.481165][T11000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0002] [ 501.505181][ T9906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.518857][T11000] System zones: 1-12 [ 501.524224][T11000] EXT4-fs error (device loop5): __ext4_iget:4906: inode #11: block 393240: comm syz.5.1583: invalid block [ 501.541765][T11000] EXT4-fs (loop5): Remounting filesystem read-only [ 501.574235][T11000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.632694][T11000] EXT4-fs warning (device loop5): dx_probe:822: inode #2: lblock 0: comm syz.5.1583: error -117 reading directory block [ 502.020225][ T5103] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 502.080766][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.227657][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 502.238827][ T5103] usb 6-1: Using ep0 maxpacket: 32 [ 502.249297][ T5103] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.267724][ T5103] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.296334][ T5103] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 502.323235][ T5103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.354722][ T5103] hub 6-1:4.0: USB hub found [ 502.548505][ T5103] hub 6-1:4.0: 2 ports detected [ 502.833009][ T5103] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 502.841925][ T5103] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 502.860245][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.886879][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.932539][ T5103] usb 6-1: USB disconnect, device number 11 [ 502.986743][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.110309][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.122887][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.237515][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.363819][T11010] loop2: detected capacity change from 0 to 32768 [ 503.378497][T11010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1585 (11010) [ 503.513853][T11010] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 503.533199][ T9906] Bluetooth: hci4: command tx timeout [ 503.541707][T11010] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 503.551319][T11010] BTRFS info (device loop2): using free-space-tree [ 503.681857][T10370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.855085][T10476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 503.905422][T10997] lo speed is unknown, defaulting to 1000 [ 504.028188][T10275] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 504.044503][T10666] hsr_slave_0: entered promiscuous mode [ 504.088688][T10666] hsr_slave_1: entered promiscuous mode [ 504.116984][T10666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.143214][T10666] Cannot create hsr debugfs directory [ 504.169058][T10476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.279490][T11040] loop5: detected capacity change from 0 to 16 [ 504.296629][T10476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 504.490652][T11040] erofs: (device loop5): mounted with root inode @ nid 36. [ 504.537961][T10476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 504.619771][T11040] syz.5.1591: attempt to access beyond end of device [ 504.619771][T11040] loop5: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 504.861477][T11044] kernel read not supported for file /file0 (pid: 11044 comm: syz.2.1590) [ 504.909439][ T29] audit: type=1800 audit(1720438530.615:61): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1590" name="file0" dev="mqueue" ino=31416 res=0 errno=0 [ 505.106988][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 505.119977][T11048] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 505.220356][T11050] input: syz0 as /devices/virtual/input/input17 [ 505.531989][ T9906] Bluetooth: hci4: command tx timeout [ 505.852454][ T2894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.485827][ T2894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.921034][T11060] loop2: detected capacity change from 0 to 40427 [ 506.984416][ T2894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.994310][T11060] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 507.070274][T11060] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 507.130191][T11060] F2FS-fs (loop2): invalid crc value [ 507.221424][T11060] F2FS-fs (loop2): Found nat_bits in checkpoint [ 507.439744][T11067] loop5: detected capacity change from 0 to 32768 [ 507.485924][T11067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1599 (11067) [ 507.505864][ T9906] Bluetooth: hci4: command tx timeout [ 507.619992][T11060] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 507.627121][T11060] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 507.648037][T11067] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 507.651027][ T2894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.667003][T11067] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 507.693860][T11094] serio: Serial port ttynull [ 507.762306][T11067] BTRFS info (device loop5): using free-space-tree [ 507.942266][T11060] syz.2.1598: attempt to access beyond end of device [ 507.942266][T11060] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 508.021003][T11107] syz.2.1598: attempt to access beyond end of device [ 508.021003][T11107] loop2: rw=34817, sector=77960, nr_sectors = 880 limit=40427 [ 508.497094][ T8604] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 508.545364][ T8604] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 508.625994][T10370] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 509.069655][T10476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.206664][T10997] chnl_net:caif_netlink_parms(): no params data found [ 509.506988][ T9906] Bluetooth: hci4: command tx timeout [ 509.948254][T11138] loop5: detected capacity change from 0 to 512 [ 510.029596][T11138] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 510.147759][T11138] EXT4-fs (loop5): 1 truncate cleaned up [ 510.203275][T11138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.264800][ T2894] bridge_slave_1: left allmulticast mode [ 510.279921][ T2894] bridge_slave_1: left promiscuous mode [ 510.285887][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.346779][ T29] audit: type=1800 audit(1720438536.326:62): pid=11138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1611" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 510.463807][ T2894] bridge_slave_0: left allmulticast mode [ 510.486885][ T2894] bridge_slave_0: left promiscuous mode [ 510.492888][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.567075][T10370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.328008][T11164] loop2: detected capacity change from 0 to 512 [ 511.566201][T11164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.629974][T11164] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.891972][ T29] audit: type=1804 audit(1720438537.911:63): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1614" name="/newroot/40/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 512.048819][ T29] audit: type=1804 audit(1720438538.100:64): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1614" name="/newroot/40/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 512.879154][T11180] loop5: detected capacity change from 0 to 32768 [ 512.891162][T11180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1616 (11180) [ 512.912047][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.973429][T11180] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 512.983530][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.000958][T11180] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 513.011165][T11180] BTRFS info (device loop5): using free-space-tree [ 513.031716][ T2894] bond0 (unregistering): Released all slaves [ 513.292475][T10476] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.626827][T10370] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 514.272350][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.299467][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.315395][T10997] bridge_slave_0: entered allmulticast mode [ 514.346657][T10997] bridge_slave_0: entered promiscuous mode [ 514.448353][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.462157][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.473862][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.516784][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.569770][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 514.597577][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.672559][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.730247][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.763037][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.781685][T10997] bridge_slave_1: entered allmulticast mode [ 514.840262][T10997] bridge_slave_1: entered promiscuous mode [ 515.032495][T11231] input: syz0 as /devices/virtual/input/input18 [ 515.111167][T11228] fuse: root generation should be zero [ 515.295506][T10997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.470873][T10997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.504570][T11213] lo speed is unknown, defaulting to 1000 [ 515.519151][T10666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 515.751281][T10666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 515.806470][T10666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 515.914180][T10997] team0: Port device team_slave_0 added [ 515.955893][T11256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.970719][T10997] team0: Port device team_slave_1 added [ 515.996868][T10666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.127077][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1630'. [ 516.155541][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1630'. [ 516.600443][T10997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.613409][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.658905][ T9906] Bluetooth: hci2: command tx timeout [ 516.709304][T10997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.726132][T10997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.733348][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.762881][T10997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.857260][ T2894] hsr_slave_0: left promiscuous mode [ 516.889049][ T2894] hsr_slave_1: left promiscuous mode [ 516.914976][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.933237][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.957135][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.991029][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.105019][ T2894] veth1_macvtap: left promiscuous mode [ 517.123632][ T2894] veth0_macvtap: left promiscuous mode [ 517.146818][ T2894] veth1_vlan: left promiscuous mode [ 517.152432][ T2894] veth0_vlan: left promiscuous mode [ 517.167345][T11250] loop3: detected capacity change from 0 to 40427 [ 517.179642][T11250] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 517.187766][T11250] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 517.228858][T11250] F2FS-fs (loop3): invalid crc value [ 517.316605][T11250] F2FS-fs (loop3): Found nat_bits in checkpoint [ 517.578718][T11250] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 517.589430][T11250] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 517.751185][T11250] syz.3.1628: attempt to access beyond end of device [ 517.751185][T11250] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 517.800413][T11250] syz.3.1628: attempt to access beyond end of device [ 517.800413][T11250] loop3: rw=34817, sector=77960, nr_sectors = 880 limit=40427 [ 517.970511][ T8611] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 517.991683][ T8611] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 518.621650][ T9906] Bluetooth: hci2: command tx timeout [ 519.247383][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 519.340645][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 520.603082][ T9906] Bluetooth: hci2: command tx timeout [ 520.817402][T10997] hsr_slave_0: entered promiscuous mode [ 520.874889][T10997] hsr_slave_1: entered promiscuous mode [ 520.908996][T10997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.937605][T10997] Cannot create hsr debugfs directory [ 521.411520][ T29] audit: type=1326 audit(1720438547.926:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11324 comm="syz.5.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f75bd9 code=0x0 [ 522.587061][T11347] loop2: detected capacity change from 0 to 1024 [ 522.600433][ T9906] Bluetooth: hci2: command tx timeout [ 522.637685][T11347] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 522.662446][T11347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 522.696380][T11347] EXT4-fs (loop2): invalid journal inode [ 523.072838][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.264542][T11347] loop2: detected capacity change from 0 to 1024 [ 524.280476][T11373] loop5: detected capacity change from 0 to 256 [ 524.313724][T11373] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 524.756070][T11378] loop3: detected capacity change from 0 to 32768 [ 524.888473][T11378] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.086258][T11378] XFS (loop3): Ending clean mount [ 525.126489][T11378] XFS (loop3): Quotacheck needed: Please wait. [ 525.261584][T11213] chnl_net:caif_netlink_parms(): no params data found [ 525.403694][T11378] XFS (loop3): Quotacheck: Done. [ 525.417916][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.990088][T11411] tmpfs: Unknown parameter 'ÿþ' [ 528.202853][T10288] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 528.456237][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.463514][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.474439][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.481735][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.387344][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.435307][T11213] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.454672][T11213] bridge_slave_0: entered allmulticast mode [ 529.481711][T11213] bridge_slave_0: entered promiscuous mode [ 529.507133][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.537604][T11213] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.545138][T11213] bridge_slave_1: entered allmulticast mode [ 529.587236][T11213] bridge_slave_1: entered promiscuous mode [ 529.694456][T11444] loop2: detected capacity change from 0 to 4096 [ 529.729480][T11444] NILFS (loop2): invalid segment: Checksum error in segment payload [ 529.729524][T11444] NILFS (loop2): trying rollback from an earlier position [ 529.762634][T11444] NILFS (loop2): recovery complete [ 529.813734][T11453] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.841531][T11452] cgroup: none used incorrectly [ 529.868191][ T29] audit: type=1800 audit(1720438556.818:66): pid=11444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1665" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 529.921457][T11213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.966841][T11455] loop5: detected capacity change from 0 to 64 [ 530.059404][T11455] Trying to free block not in datazone [ 530.059797][T11455] Trying to free block not in datazone [ 530.059810][T11455] Trying to free block not in datazone [ 530.059821][T11455] Trying to free block not in datazone [ 530.059833][T11455] minix_free_block (loop5:6): bit already cleared [ 530.060007][T11455] Trying to free block not in datazone [ 530.060036][T11455] Trying to free block not in datazone [ 530.092154][T11213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.263738][T11213] team0: Port device team_slave_0 added [ 530.377271][T11213] team0: Port device team_slave_1 added [ 530.918184][ T29] audit: type=1326 audit(1720438557.920:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11473 comm="syz.5.1672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f75bd9 code=0x0 [ 530.986922][ T5160] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 531.062495][T11213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.101249][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.160388][T11213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.208353][ T5160] usb 3-1: Using ep0 maxpacket: 16 [ 531.262848][ T5160] usb 3-1: unable to get BOS descriptor or descriptor too short [ 531.333353][ T5160] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 531.362196][ T5160] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.378946][T11213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.395150][ T5160] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 531.414231][T11213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.488742][ T5160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.503454][ T5160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.519129][T11213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.538009][ T5160] usb 3-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼 [ 531.598396][T10997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.656852][T11464] loop3: detected capacity change from 0 to 32768 [ 531.688007][ T2894] bridge_slave_1: left allmulticast mode [ 531.699017][ T2894] bridge_slave_1: left promiscuous mode [ 531.717832][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.770208][T11464] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1670 (11464) [ 531.824506][ T2894] bridge_slave_0: left allmulticast mode [ 531.849472][T11464] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 531.871191][ T2894] bridge_slave_0: left promiscuous mode [ 531.909579][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.919011][T11464] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 531.944240][T11489] loop2: detected capacity change from 0 to 512 [ 531.965594][T11464] BTRFS info (device loop3): using free-space-tree [ 532.035124][ T9906] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 532.048612][ T9906] Bluetooth: hci0: Injecting HCI hardware error event [ 532.062181][ T5096] Bluetooth: hci0: hardware error 0x00 [ 532.117514][T11489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.187482][T11489] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.279255][T11464] BTRFS info (device loop3): rebuilding free space tree [ 533.949095][T10288] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 534.127984][ T5096] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 535.321133][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.421746][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.450864][ T2894] bond0 (unregistering): Released all slaves [ 535.758427][T10997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 535.830035][T10997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 535.951850][ T9906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 535.977702][ T9906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 535.990536][ T9906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.015099][ T9906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.033973][ T9906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 536.043740][ T9906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.192075][ T5157] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 536.193397][ T5160] usb 3-1: 0:2 : does not exist [ 536.231267][T11213] hsr_slave_0: entered promiscuous mode [ 536.275373][T11213] hsr_slave_1: entered promiscuous mode [ 536.291555][T11530] loop3: detected capacity change from 0 to 4096 [ 536.318812][T11530] NILFS (loop3): invalid segment: Checksum error in segment payload [ 536.352203][T11213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.375836][T11213] Cannot create hsr debugfs directory [ 536.388721][ T5160] usb 3-1: USB disconnect, device number 4 [ 536.391387][T11530] NILFS (loop3): trying rollback from an earlier position [ 536.426456][T10997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.445097][ T5157] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 536.489704][T11530] NILFS (loop3): recovery complete [ 536.497040][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.532458][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.592104][ T5157] usb 6-1: config 0 descriptor?? [ 536.608358][ T5157] cp210x 6-1:0.0: cp210x converter detected [ 536.627383][T11531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.743355][ T29] audit: type=1800 audit(1720438564.040:68): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1678" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 536.852480][ T2894] hsr_slave_0: left promiscuous mode [ 536.864124][ T2894] hsr_slave_1: left promiscuous mode [ 536.891383][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.917574][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.000107][ T5157] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 537.211105][T11539] loop2: detected capacity change from 0 to 256 [ 537.264724][ T5157] usb 6-1: cp210x converter now attached to ttyUSB0 [ 537.268095][T11539] FAT-fs (loop2): Directory bread(block 64) failed [ 537.294345][T11539] FAT-fs (loop2): Directory bread(block 65) failed [ 537.294597][T11539] FAT-fs (loop2): Directory bread(block 66) failed [ 537.294636][T11539] FAT-fs (loop2): Directory bread(block 67) failed [ 537.294746][T11539] FAT-fs (loop2): Directory bread(block 68) failed [ 537.294782][T11539] FAT-fs (loop2): Directory bread(block 69) failed [ 537.294899][T11539] FAT-fs (loop2): Directory bread(block 70) failed [ 537.294938][T11539] FAT-fs (loop2): Directory bread(block 71) failed [ 537.295692][T11539] FAT-fs (loop2): Directory bread(block 72) failed [ 537.295733][T11539] FAT-fs (loop2): Directory bread(block 73) failed [ 537.418411][ T781] usb 6-1: USB disconnect, device number 12 [ 537.617709][ T781] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 537.772895][ T781] cp210x 6-1:0.0: device disconnected [ 537.801752][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 537.938505][T11547] loop2: detected capacity change from 0 to 64 [ 538.002540][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 538.157178][ T9906] Bluetooth: hci3: command tx timeout [ 540.701682][ T5096] Bluetooth: hci3: command tx timeout [ 541.049090][T11566] loop5: detected capacity change from 0 to 128 [ 541.071772][T11566] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 541.151092][T11566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.469708][T11568] loop5: detected capacity change from 0 to 256 [ 541.899816][T11574] loop3: detected capacity change from 0 to 512 [ 541.929664][T11498] lo speed is unknown, defaulting to 1000 [ 541.941174][T11574] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.970828][T11574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 542.052440][T11574] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1692: corrupted in-inode xattr: e_value out of bounds [ 542.216291][T11574] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1692: couldn't read orphan inode 15 (err -117) [ 542.276694][T11574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.625975][ T9906] Bluetooth: hci3: command tx timeout [ 542.663461][ T29] audit: type=1800 audit(1720438570.245:69): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1692" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 542.720215][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.791239][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.111976][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.207846][T11599] ip6t_srh: unknown srh invflags 7863 [ 543.216216][T11602] kAFS: unable to lookup cell '' [ 543.602053][T10288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.651874][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.681155][T11610] loop2: detected capacity change from 0 to 256 [ 543.725865][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.944596][T11615] loop3: detected capacity change from 0 to 1024 [ 543.947204][T10997] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.066197][T11615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.168165][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.175464][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.219318][T11624] netlink: 'syz.2.1704': attribute type 4 has an invalid length. [ 544.265369][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'. [ 544.384893][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.475369][T10288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.530020][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.537316][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.611585][ T9906] Bluetooth: hci3: command tx timeout [ 544.833648][T11618] loop5: detected capacity change from 0 to 32768 [ 545.312706][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.350642][T11618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1703 (11618) [ 545.407871][T11618] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 545.418360][T11618] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 545.429455][T11618] BTRFS info (device loop5): using free-space-tree [ 545.789222][T11618] BTRFS info (device loop5): rebuilding free space tree [ 545.852075][T11656] loop3: detected capacity change from 0 to 2048 [ 545.995054][T11664] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.449928][T11678] kAFS: unable to lookup cell '' [ 546.520110][T10370] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 546.704410][T11498] chnl_net:caif_netlink_parms(): no params data found [ 546.707486][T11686] loop2: detected capacity change from 0 to 256 [ 546.719462][T11688] netlink: 'syz.3.1714': attribute type 4 has an invalid length. [ 546.728463][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 546.910976][T11213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 547.057003][T11693] mmap: syz.3.1715 (11693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 547.809487][T11213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 547.819041][ T5096] Bluetooth: hci5: command 0x0406 tx timeout [ 548.017090][T11213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.110767][T11213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 548.191177][T11703] loop5: detected capacity change from 0 to 512 [ 548.239498][T11703] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 548.258744][ T5158] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 548.393068][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.400636][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.408566][T11498] bridge_slave_0: entered allmulticast mode [ 548.416975][T11498] bridge_slave_0: entered promiscuous mode [ 548.419194][T11703] EXT4-fs (loop5): 1 truncate cleaned up [ 548.429872][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.438345][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.449954][T11498] bridge_slave_1: entered allmulticast mode [ 548.450123][ T5158] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 548.468919][T11703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.482929][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.494207][ T9906] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 548.494465][ T9906] Bluetooth: hci1: Injecting HCI hardware error event [ 548.503985][ T5096] Bluetooth: hci1: hardware error 0x00 [ 548.523041][T11498] bridge_slave_1: entered promiscuous mode [ 548.642558][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.664174][ T29] audit: type=1800 audit(1720438576.543:70): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1712" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 548.673106][ T5158] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 548.807206][ T5158] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 548.816582][ T5158] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 548.832793][ T5158] usb 3-1: Manufacturer: syz [ 548.861001][ T5158] usb 3-1: config 0 descriptor?? [ 548.899683][T10370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.001124][ T2894] bridge_slave_1: left allmulticast mode [ 549.007355][ T2894] bridge_slave_1: left promiscuous mode [ 549.024480][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.096648][ T2894] bridge_slave_0: left allmulticast mode [ 549.104811][ T2894] bridge_slave_0: left promiscuous mode [ 549.118679][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.287098][ T5158] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 549.313857][ T5158] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 549.347234][ T5158] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 549.399306][T11718] loop3: detected capacity change from 0 to 2048 [ 549.485133][T11718] loop3: p1 < > p4 [ 549.490944][T11718] loop3: p4 size 8388608 extends beyond EOD, truncated [ 550.284427][ T5103] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 550.445604][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.471504][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.490867][ T2894] bond0 (unregistering): Released all slaves [ 550.503309][ T5103] usb 4-1: Using ep0 maxpacket: 16 [ 550.534193][ T5103] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.549433][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.570295][ T5096] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 550.586096][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.609124][ T5103] usb 4-1: language id specifier not provided by device, defaulting to English [ 550.621665][ T5103] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 550.631198][ T5103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.639266][ T5103] usb 4-1: Product: syz [ 550.643441][ T5103] usb 4-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑ë·ëˆ™î¥Ž [ 550.651469][ T5103] usb 4-1: SerialNumber: syz [ 550.665438][ T5103] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 550.952302][ T5078] usb 4-1: USB disconnect, device number 10 [ 551.040661][T11726] loop5: detected capacity change from 0 to 1024 [ 551.124319][T11498] team0: Port device team_slave_0 added [ 551.187225][T10997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.252646][T11498] team0: Port device team_slave_1 added [ 551.307170][T11730] netlink: 'syz.5.1724': attribute type 4 has an invalid length. [ 551.337768][ T781] usb 3-1: USB disconnect, device number 5 [ 551.362967][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 551.403573][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.417893][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.466469][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.544035][T11734] loop2: detected capacity change from 0 to 256 [ 551.554831][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1727'. [ 551.566157][ T2894] hsr_slave_0: left promiscuous mode [ 551.576797][ T2894] hsr_slave_1: left promiscuous mode [ 551.610917][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.630474][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.646222][ T29] audit: type=1326 audit(1720438579.682:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.5.1727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f75bd9 code=0x0 [ 552.957084][T11749] loop2: detected capacity change from 0 to 512 [ 552.999974][T11749] EXT4-fs: Ignoring removed mblk_io_submit option [ 553.012271][T11749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 553.197205][T11749] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1731: corrupted in-inode xattr: e_value out of bounds [ 553.214219][T11749] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1731: couldn't read orphan inode 15 (err -117) [ 553.232134][T11749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.027699][ T781] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 554.076925][ T29] audit: type=1800 audit(1720438582.233:72): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1731" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 554.233608][ T781] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 554.256608][ T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.288257][ T781] usb 4-1: config 0 descriptor?? [ 554.324448][ T781] cp210x 4-1:0.0: cp210x converter detected [ 554.518737][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 554.776327][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.837793][ T781] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 554.962037][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 555.015040][T11766] loop2: detected capacity change from 0 to 1024 [ 555.027184][T11768] syz.5.1735: attempt to access beyond end of device [ 555.027184][T11768] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 555.074059][T11768] syz.5.1735: attempt to access beyond end of device [ 555.074059][T11768] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 555.157578][ T781] usb 4-1: cp210x converter now attached to ttyUSB0 [ 555.269329][T11770] netlink: 'syz.5.1736': attribute type 4 has an invalid length. [ 555.313666][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1736'. [ 555.333818][ T5103] usb 4-1: USB disconnect, device number 11 [ 555.353454][ T5103] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 555.419923][ T5103] cp210x 4-1:0.0: device disconnected [ 555.517068][T11774] loop5: detected capacity change from 0 to 2048 [ 555.592870][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.600593][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 555.641130][T11774] loop5: p1 < > p4 [ 555.653331][T11774] loop5: p4 size 8388608 extends beyond EOD, truncated [ 556.219198][ T5157] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 556.476344][ T5157] usb 6-1: Using ep0 maxpacket: 16 [ 556.539055][ T5157] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.553075][ T5157] usb 6-1: language id specifier not provided by device, defaulting to English [ 556.566341][ T5157] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 556.607727][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.620417][ T5157] usb 6-1: Product: syz [ 556.624675][ T5157] usb 6-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑ë·ëˆ™î¥Ž [ 556.665113][ T5157] usb 6-1: SerialNumber: syz [ 556.708229][ T5157] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 556.954949][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.980548][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.007081][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.101427][ T9] usb 6-1: USB disconnect, device number 13 [ 557.267456][T11783] loop3: detected capacity change from 0 to 40427 [ 557.282919][T11783] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 557.298089][T11498] hsr_slave_0: entered promiscuous mode [ 557.335691][T11783] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 557.348717][T11498] hsr_slave_1: entered promiscuous mode [ 557.358982][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.368509][T11783] F2FS-fs (loop3): invalid crc value [ 557.374680][T11498] Cannot create hsr debugfs directory [ 557.455586][T11783] F2FS-fs (loop3): Found nat_bits in checkpoint [ 557.682652][T11783] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 557.693732][T11783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 557.954194][T11213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.995561][T10997] veth0_vlan: entered promiscuous mode [ 558.171302][T11213] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.215381][T11795] loop5: detected capacity change from 0 to 256 [ 558.343080][T11795] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 558.680206][T11799] input: syz0 as /devices/virtual/input/input19 [ 559.298237][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.305596][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.367621][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.374952][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.443533][T11805] syz.5.1746: attempt to access beyond end of device [ 559.443533][T11805] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 559.534053][T11805] syz.5.1746: attempt to access beyond end of device [ 559.534053][T11805] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 559.726345][ T9906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.740210][ T9906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.771769][ T9906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.961649][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.974850][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.983816][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.807777][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 560.902314][ T2894] bridge_slave_1: left allmulticast mode [ 560.911821][ T29] audit: type=1326 audit(1720438589.404:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.2.1750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c5e975bd9 code=0x0 [ 560.920059][ T2894] bridge_slave_1: left promiscuous mode [ 560.982518][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.024442][ T2894] bridge_slave_0: left allmulticast mode [ 561.045148][ T2894] bridge_slave_0: left promiscuous mode [ 561.060544][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.529799][T11841] input: syz0 as /devices/virtual/input/input20 [ 562.574952][ T5106] Bluetooth: hci4: command tx timeout [ 563.583509][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.621070][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.666777][ T2894] bond0 (unregistering): Released all slaves [ 563.853646][T11852] loop2: detected capacity change from 0 to 512 [ 563.905468][ T2894] IPVS: stopping backup sync thread 5355 ... [ 563.952199][T11806] lo speed is unknown, defaulting to 1000 [ 564.372366][T11852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.483036][T11852] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.568686][T11861] loop3: detected capacity change from 0 to 512 [ 564.612211][T11861] EXT4-fs: Ignoring removed mblk_io_submit option [ 564.632647][T11844] loop5: detected capacity change from 0 to 40427 [ 564.651771][ T5106] Bluetooth: hci4: command tx timeout [ 564.662578][T11844] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 564.678984][T11861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 564.679418][ T29] audit: type=1804 audit(1720438593.309:74): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1761" name="/newroot/88/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 564.716606][T11861] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1763: corrupted in-inode xattr: e_value out of bounds [ 564.752522][T11844] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 564.781325][T11861] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1763: couldn't read orphan inode 15 (err -117) [ 564.813667][T11844] F2FS-fs (loop5): invalid crc value [ 564.868407][T11844] F2FS-fs (loop5): Found nat_bits in checkpoint [ 564.877726][T11861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.193709][ T29] audit: type=1800 audit(1720438593.907:75): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1763" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 565.728573][T11213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.941408][T10288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.039455][ T2894] hsr_slave_0: left promiscuous mode [ 566.096647][ T2894] hsr_slave_1: left promiscuous mode [ 566.118914][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.141301][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.161610][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.194368][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.368561][ T2894] veth0_macvtap: left promiscuous mode [ 566.391767][ T2894] veth1_vlan: left promiscuous mode [ 566.424780][ T2894] veth0_vlan: left promiscuous mode [ 566.520476][T10275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.634753][ T5106] Bluetooth: hci4: command tx timeout [ 566.735465][ T781] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 566.929435][ T781] usb 4-1: config 1 has an invalid interface number: 8 but max is 0 [ 566.942911][ T781] usb 4-1: config 1 has no interface number 0 [ 566.976578][ T781] usb 4-1: New USB device found, idVendor=1199, idProduct=901c, bcdDevice=44.0a [ 567.017462][ T781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.049470][ T781] usb 4-1: Product: syz [ 567.057085][ T781] usb 4-1: Manufacturer: syz [ 567.079218][ T781] usb 4-1: SerialNumber: syz [ 567.503167][T11877] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1766'. [ 567.609438][T11815] usb 4-1: USB disconnect, device number 12 [ 568.457394][T11896] loop2: detected capacity change from 0 to 32768 [ 568.470329][T11896] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1770 (11896) [ 568.507452][T11900] loop3: detected capacity change from 0 to 2048 [ 568.518246][T11896] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 568.528906][T11896] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 568.582375][T11896] BTRFS info (device loop2): using free-space-tree [ 568.611855][ T5106] Bluetooth: hci4: command tx timeout [ 568.615893][T11900] loop3: p1 < > p4 [ 568.626316][T11900] loop3: p4 size 8388608 extends beyond EOD, truncated [ 568.807589][T11914] blktrace: Concurrent blktraces are not allowed on loop3p1 [ 568.817477][T11896] BTRFS info (device loop2): rebuilding free space tree [ 569.056888][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 569.161159][ T5103] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 569.209578][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 569.362690][T10275] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 569.380454][ T5103] usb 4-1: Using ep0 maxpacket: 16 [ 569.395354][ T5103] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.437013][ T5103] usb 4-1: language id specifier not provided by device, defaulting to English [ 569.492805][ T5103] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 569.502667][ T5103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.511324][ T5103] usb 4-1: Product: syz [ 569.519168][ T5103] usb 4-1: Manufacturer: 㓊첥눂㺷ᅯ⫦⮴儑ë·ëˆ™î¥Ž [ 569.526956][ T5103] usb 4-1: SerialNumber: syz [ 569.542131][ T5103] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 572.533684][ T5096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 572.569630][ T5096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 572.582703][ T5096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 572.593450][ T5096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.601783][ T5096] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 572.609616][ T5096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.877987][T11931] loop2: detected capacity change from 0 to 16 [ 572.894343][T11931] erofs: (device loop2): mounted with root inode @ nid 36. [ 574.632225][ T5106] Bluetooth: hci6: command tx timeout [ 574.737335][T11498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.759249][ T5157] usb 4-1: USB disconnect, device number 13 [ 574.806757][T11498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.843452][T11940] loop5: detected capacity change from 0 to 24 [ 574.854118][T11940] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 574.861123][T11931] netlink: 'syz.2.1775': attribute type 12 has an invalid length. [ 574.897030][T11931] syz.2.1775: attempt to access beyond end of device [ 574.897030][T11931] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 575.066470][T11498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.085126][T11940] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 575.112221][T11498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.202778][T11931] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 575.265773][T11928] lo speed is unknown, defaulting to 1000 [ 575.771064][T11806] chnl_net:caif_netlink_parms(): no params data found [ 576.015184][T11963] loop5: detected capacity change from 0 to 64 [ 576.317760][T11963] MINIX-fs: bad superblock or unable to read bitmaps [ 576.597695][T11976] loop3: detected capacity change from 0 to 16 [ 576.607111][T11976] erofs: (device loop3): mounted with root inode @ nid 36. [ 576.616042][ T5106] Bluetooth: hci6: command tx timeout [ 576.775342][ T5160] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 577.176258][ T5160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.229306][ T5160] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.242834][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.245713][ T5160] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.261123][T11806] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.270040][T11806] bridge_slave_0: entered allmulticast mode [ 577.287024][T11806] bridge_slave_0: entered promiscuous mode [ 577.310487][ T5160] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.486076][ T5160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.503327][ T5160] usb 3-1: config 0 descriptor?? [ 577.509393][T11977] netlink: 'syz.3.1788': attribute type 12 has an invalid length. [ 577.624085][T11983] syz.3.1788: attempt to access beyond end of device [ 577.624085][T11983] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 577.742084][T11806] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.753881][T11806] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.792178][T11806] bridge_slave_1: entered allmulticast mode [ 577.801524][T11806] bridge_slave_1: entered promiscuous mode [ 577.831562][T11976] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 577.942474][ T5160] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 577.963439][ T5160] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 577.999330][T11806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.255509][T11806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.539951][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.600304][ T5106] Bluetooth: hci6: command tx timeout [ 578.804311][T11806] team0: Port device team_slave_0 added [ 578.839443][T11806] team0: Port device team_slave_1 added [ 579.019557][T12002] Bluetooth: MGMT ver 1.22 [ 579.036625][T12002] Bluetooth: hci3: invalid length 0, exp 2 for type 29 [ 579.186293][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 579.266023][T12004] loop5: detected capacity change from 0 to 16 [ 579.284580][T12004] erofs: (device loop5): mounted with root inode @ nid 36. [ 579.347151][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.374013][ T29] audit: type=1800 audit(1720438608.783:76): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1795" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 579.394689][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.443941][T11806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.451013][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.476994][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.506795][T11806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.541208][T11806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.556029][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.585688][T11806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.627677][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.007909][T11806] hsr_slave_0: entered promiscuous mode [ 580.038996][T11806] hsr_slave_1: entered promiscuous mode [ 580.101677][ T781] usb 3-1: USB disconnect, device number 6 [ 580.140193][T11806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.187865][T11806] Cannot create hsr debugfs directory [ 580.231205][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 580.252891][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 580.576067][ T5106] Bluetooth: hci6: command tx timeout [ 580.598990][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.783752][T11928] chnl_net:caif_netlink_parms(): no params data found [ 580.916007][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.916165][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.155219][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.162576][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.301318][T12042] loop2: detected capacity change from 0 to 256 [ 581.582016][ T5106] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 582.167211][T11928] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.197272][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.226474][T11928] bridge_slave_0: entered allmulticast mode [ 582.248020][T11928] bridge_slave_0: entered promiscuous mode [ 582.372422][ T5220] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 582.447903][T11928] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.469038][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.479107][T11928] bridge_slave_1: entered allmulticast mode [ 582.489963][T11928] bridge_slave_1: entered promiscuous mode [ 582.569398][ T5220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.588715][ T5220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.618937][ T5220] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.678644][ T5220] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.706751][ T5220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.717559][ T5220] usb 6-1: config 0 descriptor?? [ 582.753110][T11928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.849476][T11928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.041516][T11928] team0: Port device team_slave_0 added [ 583.114619][T11928] team0: Port device team_slave_1 added [ 583.153724][ T5220] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 583.185537][ T5220] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 583.288195][T11928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.301029][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.329463][T11928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.431660][T11928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.444369][T11928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.495647][T11928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.876414][T11928] hsr_slave_0: entered promiscuous mode [ 583.887332][T11928] hsr_slave_1: entered promiscuous mode [ 583.907172][T11928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.919803][T11928] Cannot create hsr debugfs directory [ 583.936077][ T2894] bridge_slave_1: left allmulticast mode [ 583.947722][ T2894] bridge_slave_1: left promiscuous mode [ 583.956362][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.970036][ T2894] bridge_slave_0: left allmulticast mode [ 583.976646][ T2894] bridge_slave_0: left promiscuous mode [ 583.982706][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.996423][ T2894] bridge_slave_0: left promiscuous mode [ 584.002574][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.076185][ T2894] bridge_slave_1: left allmulticast mode [ 584.091414][ T2894] bridge_slave_1: left promiscuous mode [ 584.097543][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.122171][ T2894] bridge_slave_0: left allmulticast mode [ 584.135839][ T2894] bridge_slave_0: left promiscuous mode [ 584.155449][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.319588][ C1] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 584.355648][ T5160] usb 6-1: USB disconnect, device number 14 [ 584.492857][T12085] loop3: detected capacity change from 0 to 256 [ 584.515473][T12083] loop2: detected capacity change from 0 to 4096 [ 584.532168][T12083] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 585.202107][T12093] loop5: detected capacity change from 0 to 512 [ 585.280588][T12093] EXT4-fs error (device loop5): ext4_orphan_get:1394: inode #15: comm syz.5.1818: casefold flag without casefold feature [ 585.301809][T12093] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1818: couldn't read orphan inode 15 (err -117) [ 585.321461][T12093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.927508][T10370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.319400][T12097] loop2: detected capacity change from 0 to 32768 [ 586.344466][T12097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1819 (12097) [ 586.399173][T12097] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 586.420077][T12097] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 586.439874][T12097] BTRFS info (device loop2): using free-space-tree [ 586.666925][T12097] BTRFS info (device loop2): rebuilding free space tree [ 587.162620][T10275] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 588.132256][ T5096] Bluetooth: hci5: command 0x0406 tx timeout [ 588.313746][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.351488][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.382098][ T2894] bond0 (unregistering): Released all slaves [ 588.904446][ T29] audit: type=1326 audit(1720438618.514:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.5.1826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f75bd9 code=0x0 [ 589.599046][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.638777][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.673449][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.682204][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.708214][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 589.717994][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.875079][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.894108][ T2894] bond_slave_0: left allmulticast mode [ 589.908858][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.921603][ T2894] bond_slave_1: left allmulticast mode [ 589.930159][ T2894] bond0 (unregistering): Released all slaves [ 589.994942][ T5155] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 590.200635][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.212137][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.226972][ T5155] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.240376][ T5155] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.250038][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.261450][ T5155] usb 6-1: config 0 descriptor?? [ 590.290069][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.317963][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.333324][ T2894] bond0 (unregistering): Released all slaves [ 590.670058][ T5155] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 590.690069][ T5155] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 591.036688][T12147] binder: 12146:12147 ioctl 400c620e 0 returned -14 [ 591.430381][T12153] loop3: detected capacity change from 0 to 256 [ 591.702498][T12141] lo speed is unknown, defaulting to 1000 [ 591.777766][ T5096] Bluetooth: hci2: command tx timeout [ 591.848257][ C1] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 592.323806][T12162] loop3: detected capacity change from 0 to 4096 [ 592.333374][T12162] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 592.657612][ T5155] usb 6-1: USB disconnect, device number 15 [ 593.226798][ T29] audit: type=1326 audit(1720438623.291:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.5.1837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f75bd9 code=0x0 [ 593.762359][ T5096] Bluetooth: hci2: command tx timeout [ 594.054965][T12174] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 594.054965][T12174] program syz.5.1841 not setting count and/or reply_len properly [ 594.155022][T12176] loop2: detected capacity change from 0 to 16 [ 594.166097][T11806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 594.205627][T12176] erofs: (device loop2): mounted with root inode @ nid 36. [ 594.233305][T11806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 594.269904][ T29] audit: type=1800 audit(1720438624.425:79): pid=12176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1840" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 594.501001][T12187] loop2: detected capacity change from 0 to 128 [ 594.514826][ T2894] hsr_slave_0: left promiscuous mode [ 594.524410][ T2894] hsr_slave_1: left promiscuous mode [ 594.540539][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.551928][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.567966][ T2894] hsr_slave_0: left promiscuous mode [ 594.616036][ T2894] hsr_slave_1: left promiscuous mode [ 594.635670][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.664404][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.697731][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.724949][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.792015][ T2894] hsr_slave_0: left promiscuous mode [ 594.812139][ T2894] hsr_slave_1: left promiscuous mode [ 594.841255][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.051900][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.537853][ T2894] veth1_macvtap: left promiscuous mode [ 595.552823][ T2894] veth0_macvtap: left promiscuous mode [ 595.581428][ T2894] veth1_vlan: left promiscuous mode [ 595.586949][ T2894] veth0_vlan: left promiscuous mode [ 595.635600][ T2894] veth0_vlan: left promiscuous mode [ 595.741058][ T5096] Bluetooth: hci2: command tx timeout [ 596.286570][ T2894] infiniband syz0: set down [ 597.071860][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 597.215509][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 597.732252][ T5096] Bluetooth: hci2: command tx timeout [ 599.546768][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 599.652686][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 601.091594][ T8604] smc: removing ib device syz0 [ 602.309826][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 602.558443][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 603.931325][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 603.992915][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.007550][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.038653][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.049993][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 604.057719][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.286489][T11806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 604.474859][ T5155] lo speed is unknown, defaulting to 1000 [ 604.543327][T11806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 604.608672][T12141] chnl_net:caif_netlink_parms(): no params data found [ 605.559245][T10288] syz-executor (10288) used greatest stack depth: 17488 bytes left [ 605.669017][T12141] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.686835][T12141] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.704706][T12141] bridge_slave_0: entered allmulticast mode [ 605.725226][T12141] bridge_slave_0: entered promiscuous mode [ 606.011471][T12235] loop5: detected capacity change from 0 to 128 [ 606.016467][T12141] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.036274][T12141] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.057326][T12141] bridge_slave_1: entered allmulticast mode [ 606.077813][T12141] bridge_slave_1: entered promiscuous mode [ 606.123818][ T5106] Bluetooth: hci3: command tx timeout [ 606.744881][T12141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.079030][T12141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.255605][T11806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.304205][T11928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 607.468725][T12141] team0: Port device team_slave_0 added [ 607.564500][T11928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 607.604430][T12248] tap0: tun_chr_ioctl cmd 1074025677 [ 607.618532][T12248] tap0: linktype set to 804 [ 607.652555][T12141] team0: Port device team_slave_1 added [ 607.750125][T11928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 607.926632][T11928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 608.085627][ T5106] Bluetooth: hci3: command tx timeout [ 608.270605][T12141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.383855][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.568854][T12141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.595201][T12141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.602320][T12141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.632239][T12141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.716534][T12209] chnl_net:caif_netlink_parms(): no params data found [ 608.817442][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.958694][T12141] hsr_slave_0: entered promiscuous mode [ 608.987045][T12141] hsr_slave_1: entered promiscuous mode [ 609.016514][T12141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.057489][T12141] Cannot create hsr debugfs directory [ 609.250632][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.258263][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.367294][T12262] loop5: detected capacity change from 0 to 32768 [ 609.377879][T12262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1866 (12262) [ 609.415883][T12262] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 609.435310][T12262] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 609.468084][T12262] BTRFS info (device loop5): using free-space-tree [ 609.505239][T12209] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.534718][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.556181][T12209] bridge_slave_0: entered allmulticast mode [ 609.564568][T12209] bridge_slave_0: entered promiscuous mode [ 609.686762][T12209] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.693992][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.710008][T12209] bridge_slave_1: entered allmulticast mode [ 609.718368][T12209] bridge_slave_1: entered promiscuous mode [ 609.760257][T12262] loop5: detected capacity change from 32768 to 0 [ 609.781508][ T8596] kworker/u8:16: attempt to access beyond end of device [ 609.781508][ T8596] loop5: rw=6145, sector=10440, nr_sectors = 8 limit=0 [ 609.790079][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.802483][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.816909][ T8596] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 609.855856][ T8596] kworker/u8:16: attempt to access beyond end of device [ 609.855856][ T8596] loop5: rw=6145, sector=10448, nr_sectors = 8 limit=0 [ 609.895778][ T8596] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 609.936846][ T8596] kworker/u8:16: attempt to access beyond end of device [ 609.936846][ T8596] loop5: rw=6145, sector=13440, nr_sectors = 8 limit=0 [ 609.959520][ T8596] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 609.973984][T12294] BTRFS error (device loop5 state A): Transaction aborted (error -5) [ 609.990938][T12294] BTRFS: error (device loop5 state A) in __btrfs_run_delayed_items:1176: errno=-5 IO failure [ 610.029515][T12294] BTRFS info (device loop5 state EA): forced readonly [ 610.052780][T12294] BTRFS warning (device loop5 state EA): Skipping commit of aborted transaction. [ 610.067072][ T5106] Bluetooth: hci3: command tx timeout [ 610.086445][T12294] BTRFS: error (device loop5 state EA) in cleanup_transaction:1999: errno=-5 IO failure [ 610.136712][T12294] BTRFS error (device loop5 state EMA): remounting read-write after error is not allowed [ 610.174094][T12209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.228238][ T29] audit: type=1804 audit(1720438641.180:80): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1866" name="/newroot/116/file1/file0/bus" dev="loop5" ino=263 res=1 errno=0 [ 610.366484][T10370] BTRFS info (device loop5 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 610.498509][ T2894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.663929][T12209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.223528][ T2894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.392407][T12298] input: syz0 as /devices/virtual/input/input24 [ 611.521227][T12209] team0: Port device team_slave_0 added [ 612.030845][ T2894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.048470][ T5106] Bluetooth: hci3: command tx timeout [ 612.374266][T12209] team0: Port device team_slave_1 added [ 612.460119][ T2894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.737594][T12309] loop2: detected capacity change from 0 to 2048 [ 612.783348][T12209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.790633][T12209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.836947][T12309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.866480][T12209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.894630][T12209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.905624][T12209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.946980][ T29] audit: type=1800 audit(1720438644.025:81): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1879" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 613.007528][T12209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.020133][ T29] audit: type=1800 audit(1720438644.025:82): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1879" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 613.042178][T11928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.129107][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 613.166185][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 613.182711][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 613.194415][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 613.210282][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 613.226824][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.523698][T11928] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.634009][T12209] hsr_slave_0: entered promiscuous mode [ 613.656957][T12209] hsr_slave_1: entered promiscuous mode [ 613.664204][T12209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.683336][T12209] Cannot create hsr debugfs directory [ 613.696335][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.703564][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.705297][T12316] loop2: detected capacity change from 0 to 32768 [ 613.720920][T12316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1880 (12316) [ 613.749043][T11806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.779399][T12316] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 613.825203][T12316] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 613.850843][T12316] BTRFS info (device loop2): using free-space-tree [ 613.922332][ T2894] bridge_slave_1: left allmulticast mode [ 613.933117][ T2894] bridge_slave_1: left promiscuous mode [ 613.939431][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.958108][ T2894] bridge_slave_0: left allmulticast mode [ 613.964463][ T2894] bridge_slave_0: left promiscuous mode [ 613.970916][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.995186][ T2894] bridge_slave_1: left allmulticast mode [ 614.000938][ T2894] bridge_slave_1: left promiscuous mode [ 614.009536][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.024968][ T2894] bridge_slave_0: left allmulticast mode [ 614.032326][ T2894] bridge_slave_0: left promiscuous mode [ 614.038283][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.128238][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.136495][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 614.164802][T12316] loop2: detected capacity change from 32768 to 0 [ 614.184619][ T8596] kworker/u8:16: attempt to access beyond end of device [ 614.184619][ T8596] loop2: rw=6145, sector=13440, nr_sectors = 8 limit=0 [ 614.217611][ T8596] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 614.233113][ T8596] kworker/u8:16: attempt to access beyond end of device [ 614.233113][ T8596] loop2: rw=6145, sector=13448, nr_sectors = 8 limit=0 [ 614.256350][ T8596] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 614.272706][ T8596] kworker/u8:16: attempt to access beyond end of device [ 614.272706][ T8596] loop2: rw=6145, sector=13456, nr_sectors = 8 limit=0 [ 614.300995][ T8596] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 614.314398][T12316] BTRFS error (device loop2 state A): Transaction aborted (error -5) [ 614.322837][T12316] BTRFS: error (device loop2 state A) in __btrfs_run_delayed_items:1176: errno=-5 IO failure [ 614.341250][T12316] BTRFS info (device loop2 state EA): forced readonly [ 614.348190][T12316] BTRFS warning (device loop2 state EA): Skipping commit of aborted transaction. [ 614.357416][T12316] BTRFS: error (device loop2 state EA) in cleanup_transaction:1999: errno=-5 IO failure [ 614.367798][T12316] BTRFS error (device loop2 state EMA): remounting read-write after error is not allowed [ 614.414795][ T29] audit: type=1804 audit(1720438645.568:83): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1880" name="/newroot/135/file1/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 614.538366][T10275] BTRFS info (device loop2 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 615.249362][ T5106] Bluetooth: hci0: command tx timeout [ 615.649257][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.685796][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.722781][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.738541][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.760078][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.761256][ T2894] bond0 (unregistering): Released all slaves [ 615.805738][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.836745][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 615.844578][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.165786][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.179350][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.196169][ T2894] bond0 (unregistering): Released all slaves [ 616.217187][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.224441][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.230917][ T5096] Bluetooth: hci0: command tx timeout [ 617.376645][T12141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.492777][T12141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.549289][ T2894] hsr_slave_0: left promiscuous mode [ 617.551163][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.569071][ T2894] hsr_slave_1: left promiscuous mode [ 617.573990][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 617.585377][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.587408][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 617.594740][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.609355][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 617.619431][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 617.627271][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 617.628994][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.646555][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.683939][ T2894] hsr_slave_0: left promiscuous mode [ 617.690992][ T2894] hsr_slave_1: left promiscuous mode [ 617.704331][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.713976][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.760079][ T2894] veth1_macvtap: left promiscuous mode [ 617.766718][ T2894] veth0_macvtap: left promiscuous mode [ 617.772438][ T2894] veth1_vlan: left promiscuous mode [ 617.778067][ T2894] veth0_vlan: left promiscuous mode [ 617.917309][ T5106] Bluetooth: hci1: command tx timeout [ 619.184248][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 619.215783][ T5106] Bluetooth: hci0: command tx timeout [ 619.275117][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 619.606313][ T5106] Bluetooth: hci4: command tx timeout [ 619.907452][ T5106] Bluetooth: hci1: command tx timeout [ 620.592356][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 620.657652][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 621.207664][ T5106] Bluetooth: hci0: command tx timeout [ 621.584454][ T5106] Bluetooth: hci4: command tx timeout [ 621.766993][T12141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 621.867593][T12141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 621.921180][ T5106] Bluetooth: hci1: command tx timeout [ 622.482254][T12312] chnl_net:caif_netlink_parms(): no params data found [ 623.178833][T11928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.258599][T12141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.340840][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.351045][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.360273][T12312] bridge_slave_0: entered allmulticast mode [ 623.368422][T12312] bridge_slave_0: entered promiscuous mode [ 623.379367][T12335] chnl_net:caif_netlink_parms(): no params data found [ 623.555667][ T5106] Bluetooth: hci4: command tx timeout [ 623.562385][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.573072][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.590762][T12312] bridge_slave_1: entered allmulticast mode [ 623.599570][T12312] bridge_slave_1: entered promiscuous mode [ 623.673246][T12209] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 623.767508][T12209] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 623.848927][T12209] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 623.861846][ T5106] Bluetooth: hci1: command tx timeout [ 623.907156][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.952738][T12141] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.055369][T12209] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.075235][T12339] chnl_net:caif_netlink_parms(): no params data found [ 624.112683][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.143481][T12335] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.156453][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.163858][T12335] bridge_slave_0: entered allmulticast mode [ 624.187162][T12335] bridge_slave_0: entered promiscuous mode [ 624.311855][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.356068][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.364284][T12335] bridge_slave_1: entered allmulticast mode [ 624.386002][T12335] bridge_slave_1: entered promiscuous mode [ 624.502670][T12312] team0: Port device team_slave_0 added [ 624.547845][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.555031][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.720707][T12312] team0: Port device team_slave_1 added [ 624.782375][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.789640][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.825850][T12335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.841899][T12335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.855415][T11928] veth0_vlan: entered promiscuous mode [ 624.950268][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.958199][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.986139][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.130766][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.138225][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.168177][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.210214][T12335] team0: Port device team_slave_0 added [ 625.242536][T12335] team0: Port device team_slave_1 added [ 625.369135][T12339] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.377386][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.386514][T12339] bridge_slave_0: entered allmulticast mode [ 625.394404][T12339] bridge_slave_0: entered promiscuous mode [ 625.443773][T11928] veth1_vlan: entered promiscuous mode [ 625.460391][T12335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.476248][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.506353][T12335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.538144][ T5096] Bluetooth: hci4: command tx timeout [ 625.551314][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.560369][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.568401][T12339] bridge_slave_1: entered allmulticast mode [ 625.576483][T12339] bridge_slave_1: entered promiscuous mode [ 625.590841][T12312] hsr_slave_0: entered promiscuous mode [ 625.598818][T12312] hsr_slave_1: entered promiscuous mode [ 625.611689][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.621053][T12312] Cannot create hsr debugfs directory [ 625.654488][T12335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.674980][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.706481][T12335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.925850][T12339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.943098][T12339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.052981][T12339] team0: Port device team_slave_0 added [ 626.158761][T12339] team0: Port device team_slave_1 added [ 626.203718][T12335] hsr_slave_0: entered promiscuous mode [ 626.211311][T12335] hsr_slave_1: entered promiscuous mode [ 626.221336][T12335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.230039][T12335] Cannot create hsr debugfs directory [ 626.521617][T12339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.529063][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.556973][T12339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.677311][ T8596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.755391][T12339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.773585][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.801166][T12339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.897541][ T8596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.955795][T11928] veth0_macvtap: entered promiscuous mode [ 627.038954][T11928] veth1_macvtap: entered promiscuous mode [ 627.106221][ T8596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.238965][T12339] hsr_slave_0: entered promiscuous mode [ 627.256650][T12339] hsr_slave_1: entered promiscuous mode [ 627.266055][T12339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.273769][T12339] Cannot create hsr debugfs directory [ 627.316023][ T8596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.494950][T12209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.507863][T12141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.624493][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.635477][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.645652][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.658551][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.669630][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.683628][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.693643][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.704437][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.718244][T11928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.797968][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.819807][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.830678][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.843180][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.854600][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.865188][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.875672][T11928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.886247][T11928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.901757][T11928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.971755][T12209] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.078868][T11928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.088883][T11928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.098443][T11928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.107860][T11928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.131834][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.139161][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.153451][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.160812][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.320995][T12141] veth0_vlan: entered promiscuous mode [ 628.347550][ T8596] bridge_slave_1: left allmulticast mode [ 628.353322][ T8596] bridge_slave_1: left promiscuous mode [ 628.361185][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.384473][ T8596] bridge_slave_0: left allmulticast mode [ 628.391046][ T8596] bridge_slave_0: left promiscuous mode [ 628.401093][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.419327][ T8596] bridge_slave_1: left allmulticast mode [ 628.425188][ T8596] bridge_slave_1: left promiscuous mode [ 628.433082][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.445577][ T8596] bridge_slave_0: left allmulticast mode [ 628.451346][ T8596] bridge_slave_0: left promiscuous mode [ 628.457551][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.811741][ T5106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.829941][ T5106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.856300][ T5106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.865152][ T5106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.874275][ T5106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 628.897494][ T5106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.999012][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.013403][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.027219][ T8596] bond0 (unregistering): Released all slaves [ 630.403176][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.419865][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.436509][ T8596] bond0 (unregistering): Released all slaves [ 630.498697][T12141] veth1_vlan: entered promiscuous mode [ 630.873141][ T5106] Bluetooth: hci5: command tx timeout [ 631.181088][T12141] veth0_macvtap: entered promiscuous mode [ 631.269859][T12141] veth1_macvtap: entered promiscuous mode [ 631.440667][ T8596] hsr_slave_0: left promiscuous mode [ 631.451519][ T8596] hsr_slave_1: left promiscuous mode [ 631.459309][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.468150][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.482764][ T8596] hsr_slave_0: left promiscuous mode [ 631.489062][ T8596] hsr_slave_1: left promiscuous mode [ 631.495931][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.503610][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.513161][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.520905][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.568299][ T8596] veth1_macvtap: left promiscuous mode [ 631.573920][ T8596] veth0_macvtap: left promiscuous mode [ 631.580629][ T8596] veth1_vlan: left promiscuous mode [ 631.591686][ T8596] veth0_vlan: left promiscuous mode [ 632.455593][ T8596] team0 (unregistering): Port device team_slave_1 removed [ 632.582092][ T8596] team0 (unregistering): Port device team_slave_0 removed [ 632.859132][ T5106] Bluetooth: hci5: command tx timeout [ 634.834825][ T5106] Bluetooth: hci5: command tx timeout [ 634.974205][ T8596] team0 (unregistering): Port device team_slave_1 removed [ 635.106910][ T8596] team0 (unregistering): Port device team_slave_0 removed [ 636.400401][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.424658][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.449055][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.461963][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.481852][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.492507][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.502398][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.513611][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.531842][T12141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.696621][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.710690][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.727718][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.741538][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.751472][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.762185][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.774671][T12141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.785426][T12141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.799135][T12141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.815375][ T5096] Bluetooth: hci5: command tx timeout [ 636.818434][T12141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.832441][T12141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.841947][T12141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.853011][T12141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.940469][T12209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.335235][T12312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 637.480794][T12312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 637.523695][T12312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 637.534209][T12373] chnl_net:caif_netlink_parms(): no params data found [ 637.622710][T12312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 637.793477][T12209] veth0_vlan: entered promiscuous mode [ 637.921873][T12373] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.929219][T12373] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.936748][T12373] bridge_slave_0: entered allmulticast mode [ 637.947187][T12373] bridge_slave_0: entered promiscuous mode [ 637.967992][ T8600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.975884][ T8600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.067583][T12373] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.080906][T12373] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.089485][T12373] bridge_slave_1: entered allmulticast mode [ 638.098830][T12373] bridge_slave_1: entered promiscuous mode [ 638.168401][T12209] veth1_vlan: entered promiscuous mode [ 638.181367][ T8600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.191235][ T8600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.243380][T12373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.280730][T12373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.565367][T12391] loop0: detected capacity change from 0 to 1024 [ 638.579977][T12391] hfsplus: invalid btree flag [ 638.585218][T12391] hfsplus: failed to load catalog file [ 638.637105][T12373] team0: Port device team_slave_0 added [ 638.657191][T12373] team0: Port device team_slave_1 added [ 638.791797][T12373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.800061][T12373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.826707][T12373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.842809][T12373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.850100][T12373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.880150][T12373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.901759][T12335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.939928][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 639.020495][T12339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.102278][ T8596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.127026][ T25] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 639.136156][ T25] usb 1-1: config 0 has no interface number 0 [ 639.142577][ T25] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 639.166427][ T25] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 639.184763][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 639.200839][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.202173][T12209] veth0_macvtap: entered promiscuous mode [ 639.225400][ T25] usb 1-1: Product: syz [ 639.229647][ T25] usb 1-1: Manufacturer: syz [ 639.239562][ T25] usb 1-1: SerialNumber: syz [ 639.248440][ T25] usb 1-1: config 0 descriptor?? [ 639.253518][ T25] usb 1-1: Interface #216 referenced by multiple IADs [ 639.276272][T12335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.389827][ T25] snd-usb-audio 1-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 639.395307][T12339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.441610][T12209] veth1_macvtap: entered promiscuous mode [ 639.477562][ T25] usb 1-1: USB disconnect, device number 3 [ 639.524522][ T8596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.581326][T12373] hsr_slave_0: entered promiscuous mode [ 639.589115][T12373] hsr_slave_1: entered promiscuous mode [ 639.595813][T12373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.603643][T12373] Cannot create hsr debugfs directory [ 639.609513][T12335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.736898][T12339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.802895][ T8596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.832902][T12335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.928504][T12339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.119047][ T8596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.210130][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.222759][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.238348][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.250461][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.261909][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.289613][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.300346][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.310279][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.325280][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.338109][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.351230][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.364091][T12209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.467526][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.497745][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.514709][T12396] loop0: detected capacity change from 0 to 2048 [ 640.521541][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.536200][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.546423][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.565101][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.575332][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.586209][T12397] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.597040][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.607553][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.618448][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.638519][T12209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.776162][T12209] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.796533][T12209] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.805480][T12209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.816141][T12209] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.011927][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.046614][ T8596] bridge_slave_1: left allmulticast mode [ 641.052351][ T8596] bridge_slave_1: left promiscuous mode [ 641.063062][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.075181][ T8596] bridge_slave_0: left allmulticast mode [ 641.080874][ T8596] bridge_slave_0: left promiscuous mode [ 641.090750][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.106939][ T8596] bridge_slave_1: left allmulticast mode [ 641.115128][ T8596] bridge_slave_1: left promiscuous mode [ 641.123835][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.158480][ T8596] bridge_slave_0: left allmulticast mode [ 641.176069][ T8596] bridge_slave_0: left promiscuous mode [ 641.182353][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.677140][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.691385][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.713307][ T8596] bond0 (unregistering): Released all slaves [ 643.127340][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.150146][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.166421][ T8596] bond0 (unregistering): Released all slaves [ 643.198569][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.205811][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.358502][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.365833][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.381023][T12339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 644.406285][T12339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 644.504804][T12339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 644.541236][T12412] loop0: detected capacity change from 0 to 1024 [ 644.560856][T12412] hfsplus: invalid btree flag [ 644.565978][T12412] hfsplus: failed to load catalog file [ 644.727034][T12339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 644.879872][ T8596] hsr_slave_0: left promiscuous mode [ 644.890778][ T8596] hsr_slave_1: left promiscuous mode [ 644.902078][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.910124][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.933875][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.942663][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.949767][ T5157] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 644.972680][ T8596] hsr_slave_0: left promiscuous mode [ 644.989966][ T8596] hsr_slave_1: left promiscuous mode [ 644.996640][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.004593][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.015368][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.025508][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.079410][ T8596] veth1_macvtap: left promiscuous mode [ 645.085907][ T8596] veth0_macvtap: left promiscuous mode [ 645.091588][ T8596] veth1_vlan: left promiscuous mode [ 645.097091][ T8596] veth0_vlan: left promiscuous mode [ 645.104351][ T8596] veth1_macvtap: left promiscuous mode [ 645.111383][ T8596] veth0_macvtap: left promiscuous mode [ 645.118868][ T8596] veth1_vlan: left promiscuous mode [ 645.124694][ T8596] veth0_vlan: left promiscuous mode [ 645.136961][ T5157] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 645.149804][ T5157] usb 1-1: config 0 has no interface number 0 [ 645.155963][ T5157] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 645.188172][ T5157] usb 1-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 645.217525][ T5157] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 645.237839][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.254814][ T5157] usb 1-1: Product: syz [ 645.259043][ T5157] usb 1-1: Manufacturer: syz [ 645.263657][ T5157] usb 1-1: SerialNumber: syz [ 645.306869][ T5157] usb 1-1: config 0 descriptor?? [ 645.313081][ T5157] usb 1-1: Interface #216 referenced by multiple IADs [ 645.365720][ T5157] snd-usb-audio 1-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 645.540931][ T5157] usb 1-1: USB disconnect, device number 4 [ 646.692916][ T8596] team0 (unregistering): Port device team_slave_1 removed [ 646.762258][T12414] loop0: detected capacity change from 0 to 32768 [ 646.840791][ T8596] team0 (unregistering): Port device team_slave_0 removed [ 650.252702][T12429] loop0: detected capacity change from 0 to 512 [ 650.260386][T12429] EXT4-fs: Ignoring removed oldalloc option [ 650.291809][T12429] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 650.319001][T12429] EXT4-fs (loop0): 1 truncate cleaned up [ 650.350333][T12429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.592409][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.459980][ T8596] team0 (unregistering): Port device team_slave_1 removed [ 651.530035][ T8596] team0 (unregistering): Port device team_slave_0 removed [ 652.638106][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.652839][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.862017][T12335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.930956][ T8591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.962068][ T8591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.136341][T12335] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.384338][T11011] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.391764][T11011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.420024][T12451] dccp_close: ABORT with 40 bytes unread [ 653.718354][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.725590][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.769903][T12373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.810334][T12373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.898190][T12373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.057048][T12373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 654.319980][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.373784][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.717196][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.836165][T12480] loop3: detected capacity change from 0 to 1024 [ 656.002281][ T1099] hfsplus: b-tree write err: -5, ino 4 [ 656.036809][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.044495][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.260484][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.267837][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.316797][ T8596] bridge_slave_1: left allmulticast mode [ 656.322631][ T8596] bridge_slave_1: left promiscuous mode [ 656.371538][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.398649][ T8596] bridge_slave_0: left allmulticast mode [ 656.420965][ T8596] bridge_slave_0: left promiscuous mode [ 656.437335][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.669460][T12504] loop0: detected capacity change from 0 to 1024 [ 656.698511][T12504] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 656.714582][T12504] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 656.732084][T12504] EXT4-fs (loop0): mount failed [ 656.879212][T12504] loop0: detected capacity change from 0 to 2048 [ 656.901840][T12504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.469505][T12508] loop0: detected capacity change from 0 to 32768 [ 657.577421][ T8596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.579861][T12508] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 657.603202][T12508] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 657.627660][ T8596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.635030][T12508] bcachefs (loop0): alloc_read... done [ 657.642138][T12508] bcachefs (loop0): stripes_read... done [ 657.648086][T12508] bcachefs (loop0): snapshots_read... done [ 657.658680][T12508] bcachefs (loop0): journal_replay... done [ 657.664628][T12508] bcachefs (loop0): resume_logged_ops... done [ 657.671035][T12508] bcachefs (loop0): going read-write [ 657.675196][ T8596] bond0 (unregistering): Released all slaves [ 657.708608][T12508] bcachefs (loop0): done starting filesystem [ 658.019576][T12141] bcachefs (loop0): shutting down [ 658.037399][T12141] bcachefs (loop0): going read-only [ 658.074855][T12141] bcachefs (loop0): finished waiting for writes to stop [ 658.139927][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.151833][T12141] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 658.163779][T12141] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 658.183321][T12141] ------------[ cut here ]------------ [ 658.189000][T12141] kernel BUG at fs/bcachefs/journal.c:1189! [ 658.223741][T12141] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 658.231073][T12141] CPU: 0 PID: 12141 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller #0 [ 658.239692][T12141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 658.249740][T12141] RIP: 0010:bch2_fs_journal_stop+0x58a/0x590 [ 658.255732][T12141] Code: c1 0f 8c 22 fd ff ff 4c 89 f7 49 89 f4 e8 0e ed c7 fd 4c 89 e6 48 8b 54 24 10 e9 0a fd ff ff e8 4c f6 51 07 e8 67 38 62 fd 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 658.275339][T12141] RSP: 0018:ffffc9000962f8a0 EFLAGS: 00010293 [ 658.281499][T12141] RAX: ffffffff8433ef49 RBX: 0000000000000008 RCX: ffff8880151d5a00 [ 658.289491][T12141] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 658.297598][T12141] RBP: ffffc9000962f9e0 R08: ffffffff8433eefa R09: 1ffff1100d44954f [ 658.305633][T12141] R10: dffffc0000000000 R11: ffffed100d449550 R12: dffffc0000000000 [ 658.313609][T12141] R13: ffff88806a24a440 R14: 1ffff1100d449488 R15: 0000000000000009 [ 658.321606][T12141] FS: 000055555bec2500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 658.330549][T12141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.337153][T12141] CR2: 00007fad050d1178 CR3: 000000007ee76000 CR4: 0000000000350ef0 [ 658.345137][T12141] Call Trace: [ 658.348436][T12141] [ 658.351373][T12141] ? __die_body+0x88/0xe0 [ 658.355756][T12141] ? die+0xcf/0x110 [ 658.359587][T12141] ? do_trap+0x15a/0x3a0 [ 658.363851][T12141] ? bch2_fs_journal_stop+0x58a/0x590 [ 658.369273][T12141] ? do_error_trap+0x1dc/0x2c0 [ 658.374066][T12141] ? bch2_fs_journal_stop+0x58a/0x590 [ 658.379547][T12141] ? __pfx_do_error_trap+0x10/0x10 [ 658.384675][T12141] ? report_bug+0x3e8/0x500 [ 658.389198][T12141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.394836][T12141] ? handle_invalid_op+0x34/0x40 [ 658.399780][T12141] ? bch2_fs_journal_stop+0x58a/0x590 [ 658.405252][T12141] ? exc_invalid_op+0x38/0x50 [ 658.409952][T12141] ? asm_exc_invalid_op+0x1a/0x20 [ 658.414999][T12141] ? bch2_fs_journal_stop+0x53a/0x590 [ 658.420388][T12141] ? bch2_fs_journal_stop+0x589/0x590 [ 658.425782][T12141] ? bch2_fs_journal_stop+0x58a/0x590 [ 658.431183][T12141] ? __pfx_bch2_fs_journal_stop+0x10/0x10 [ 658.436923][T12141] ? __pfx___bch2_print+0x10/0x10 [ 658.441971][T12141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.447606][T12141] ? __bch2_btree_flush_all+0x6dc/0x700 [ 658.453173][T12141] ? __bch2_btree_flush_all+0x6f/0x700 [ 658.458661][T12141] __bch2_fs_read_only+0x30c/0x430 [ 658.463799][T12141] bch2_fs_read_only+0xb52/0x1210 [ 658.468856][T12141] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 658.474341][T12141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.479989][T12141] ? __down_write_common+0x162/0x200 [ 658.485293][T12141] ? __pfx___bch2_print+0x10/0x10 [ 658.490334][T12141] ? __pfx___down_write_common+0x10/0x10 [ 658.496065][T12141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.501700][T12141] ? hook_sb_delete+0xa5e/0xb90 [ 658.506561][T12141] ? evict+0x577/0x630 [ 658.510672][T12141] __bch2_fs_stop+0x105/0x540 [ 658.515368][T12141] ? __pfx_hook_sb_delete+0x10/0x10 [ 658.520594][T12141] ? __pfx___bch2_fs_stop+0x10/0x10 [ 658.525812][T12141] ? __pfx_evict_inodes+0x10/0x10 [ 658.530858][T12141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.536607][T12141] ? __pfx_bch2_put_super+0x10/0x10 [ 658.541837][T12141] generic_shutdown_super+0x138/0x2d0 [ 658.547251][T12141] bch2_kill_sb+0x41/0x50 [ 658.551623][T12141] deactivate_locked_super+0xc6/0x130 [ 658.557301][T12141] cleanup_mnt+0x41f/0x4b0 [ 658.561758][T12141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 658.567439][T12141] ? lockdep_hardirqs_on+0x99/0x150 [ 658.572717][T12141] task_work_run+0x251/0x310 [ 658.577360][T12141] ? __pfx_task_work_run+0x10/0x10 [ 658.582606][T12141] ? __x64_sys_umount+0x126/0x170 [ 658.587663][T12141] ? syscall_exit_to_user_mode+0xa3/0x360 [ 658.593404][T12141] syscall_exit_to_user_mode+0x168/0x360 [ 658.599153][T12141] do_syscall_64+0x100/0x230 [ 658.603771][T12141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.609701][T12141] RIP: 0033:0x7f9928f76f07 [ 658.614131][T12141] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 658.633745][T12141] RSP: 002b:00007ffdda0a5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 658.642168][T12141] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9928f76f07 [ 658.650142][T12141] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdda0a6010 [ 658.658288][T12141] RBP: 00007ffdda0a6010 R08: 0000000000000000 R09: 0000000000000000 [ 658.666257][T12141] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdda0a70d0 [ 658.674229][T12141] R13: 00007f9928fe3515 R14: 00000000000a5c5a R15: 00000000000a58ec [ 658.682217][T12141] [ 658.685232][T12141] Modules linked in: [ 658.701740][T12141] ---[ end trace 0000000000000000 ]--- [ 658.707403][T12141] RIP: 0010:bch2_fs_journal_stop+0x58a/0x590 [ 658.713445][T12141] Code: c1 0f 8c 22 fd ff ff 4c 89 f7 49 89 f4 e8 0e ed c7 fd 4c 89 e6 48 8b 54 24 10 e9 0a fd ff ff e8 4c f6 51 07 e8 67 38 62 fd 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 658.716001][T12312] veth0_vlan: entered promiscuous mode [ 658.733325][T12141] RSP: 0018:ffffc9000962f8a0 EFLAGS: 00010293 [ 658.744958][T12141] RAX: ffffffff8433ef49 RBX: 0000000000000008 RCX: ffff8880151d5a00 [ 658.748992][T12312] veth1_vlan: entered promiscuous mode [ 658.753018][T12141] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 658.768214][T12141] RBP: ffffc9000962f9e0 R08: ffffffff8433eefa R09: 1ffff1100d44954f [ 658.776341][T12141] R10: dffffc0000000000 R11: ffffed100d449550 R12: dffffc0000000000 [ 658.787156][T12141] R13: ffff88806a24a440 R14: 1ffff1100d449488 R15: 0000000000000009 [ 658.794684][T12312] veth0_macvtap: entered promiscuous mode [ 658.795245][T12141] FS: 000055555bec2500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 658.815473][T12141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.815796][T12339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.822205][T12141] CR2: 00007fad050d1178 CR3: 000000007ee76000 CR4: 0000000000350ef0 [ 658.822235][T12141] Kernel panic - not syncing: Fatal exception [ 658.822782][T12141] Kernel Offset: disabled